last executing test programs:

1m31.627903711s ago: executing program 1 (id=547):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)="eb37c5602ccd2701ef888c994ece5313b93c1188c50758e69d38f50e95faf2c88afbc81df1b2716a818ca64e1192a9ed415d322a628563334cb513c65995efee83381e5ee7b171277cedbde7f8a894d47fe6bd01584f8aa05469bc56288175db00ca611f9df6e8f2b8868bddec0a36ae62c043d8909c30de0950992b8689c6b8fce3ec671b7d60daf80540109299d91c8a8af26277c6ee628414aa36002ac5d7d14ff88dd0c0fb5081d49f9b0058a65cca89da15fabe96073111bd219f30e3bc9c847505ac6e11eb45b3721659ca65d2f99f", 0xd2}, {&(0x7f0000000000)="b2fd4c38a9e48f28f4d15a98c6f86c83cb06a0f24fdaa6ee92", 0x19}, {&(0x7f0000000880)="17c8db1d33aa0fe0d17e1e258f55918d06c2907e08c01a1b279ae560a67e8b2dc5e345f22fc281482defd42c3ee28b445db38427fd450b4337079d8be4a151e2a6ff45d5a9c070ae2baa6691742c82901062d4059615226c0fae3a8f5346967b068c8cda7b6abe8293043ff46a64048924f4df93ea24eb8efe41", 0x7a}], 0x3, &(0x7f0000000940)=ANY=[], 0x210}}], 0x1, 0x4000)
close(r0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0))

1m31.558941382s ago: executing program 1 (id=549):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6121})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
unshare(0x2a020400)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r7}, {r7, 0x603c}, {r7, 0x2243}], 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0)

1m30.663878732s ago: executing program 1 (id=563):
socket$inet6(0xa, 0x1, 0x100)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
close(r0)

1m30.611450461s ago: executing program 1 (id=565):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cb17000ffdbdf256900000008"], 0x24}, 0x1, 0x0, 0x0, 0x44844}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0x0, &(0x7f0000001a00)="000000000000000022385ba988a88dc288a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x20000000000000d5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000001900000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x81}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r3], 0x50)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$inet(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="91", 0x1}], 0x1}, 0x801)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500"], 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000640)='fsi_master_gpio_cmd_same_addr\x00'}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800010324000000"], 0x14}}, 0x240008d4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000580)={0x8, &(0x7f00000002c0)=[{0x4, 0x3, 0x31, 0x6}, {0x401, 0x6, 0x1, 0x6}, {0x2c, 0x4, 0x1, 0x80000001}, {0x3, 0x3, 0x7, 0x1}, {0x9deb, 0x3d, 0xc, 0x1}, {0x8001, 0x1, 0x7, 0x3}, {0xd, 0xc0, 0x8, 0x7791}, {0x400, 0x4, 0x5, 0x1}]}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
r9 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x190, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x8, 0x3, 0x4, 0x1, 0x1], 0x4, 0x3}, {0x1, [0x0, 0x1, 0x5, 0x7, 0x6, 0x5], 0x4, 0x5}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x6}}, @common=@socket0={{0x20}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)

1m30.609793673s ago: executing program 1 (id=566):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x17, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10)

1m30.334526899s ago: executing program 1 (id=568):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x945efdbd55cacb66, 0x0) (async, rerun: 32)
r2 = epoll_create1(0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}) (async)
r4 = epoll_create1(0x0)
vmsplice(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e1e9696865f8dc679f4e415532fd2a19920b7228e3290958285ae5e3194e53642d147c23fb0d987128ece5a4518c326995853906973145ad8301e9fa4269be7576d2a746e156c0f27bf03088ab07b2e7e1e8d7cb5f0348b19ff47267510395b12336ae2790ef0b5c7ec9265a4c2ce2a461ccb2e06ef8f71fad7f982fc35248056e0f9df645b39c05c28e8336b39c2a82c92eb75fb9ef3acade23ccef7d5312f7989cc8e", 0xa4}], 0x1, 0x7) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) (async, rerun: 32)
pselect6(0x73, &(0x7f00000001c0)={0x300}, 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x2004})

1m30.259312843s ago: executing program 32 (id=568):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x945efdbd55cacb66, 0x0) (async, rerun: 32)
r2 = epoll_create1(0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}) (async)
r4 = epoll_create1(0x0)
vmsplice(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e1e9696865f8dc679f4e415532fd2a19920b7228e3290958285ae5e3194e53642d147c23fb0d987128ece5a4518c326995853906973145ad8301e9fa4269be7576d2a746e156c0f27bf03088ab07b2e7e1e8d7cb5f0348b19ff47267510395b12336ae2790ef0b5c7ec9265a4c2ce2a461ccb2e06ef8f71fad7f982fc35248056e0f9df645b39c05c28e8336b39c2a82c92eb75fb9ef3acade23ccef7d5312f7989cc8e", 0xa4}], 0x1, 0x7) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) (async, rerun: 32)
pselect6(0x73, &(0x7f00000001c0)={0x300}, 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x2004})

4.120435063s ago: executing program 0 (id=1588):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket(0x2b, 0x80801, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x8000000000000000, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0)
write(r0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
socket(0x2b, 0x80801, 0x1) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f0000000080)) (async)
splice(r1, 0x0, r2, 0x0, 0x8000000000000000, 0x0) (async)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x0, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) (async)
write(r0, 0x0, 0x0) (async)

3.970471884s ago: executing program 0 (id=1589):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x6b, 0xaa, 0x6, 0x4, 0x0, 0x81})
getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000140))

3.96998007s ago: executing program 0 (id=1590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2000000022, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff7}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000001400)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x2}, 0xfe}, 0x18)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)

1.319214143s ago: executing program 3 (id=1591):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=[0x1, 0x1, 0x9], 0x0, 0x0, 0x3}}, 0x40)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000180)={0x0, 0x7fff, [0x0, 0xb0, 0x200, 0x8000, 0x8, 0xe17e]}) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100004400010000000000ffdbdf25010100800c00000000000000000000001400010001"], 0x114}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x9, 0x4) (async)
setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async)
sendto$inet6(r4, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8", 0x599, 0x20044000, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2, 0x6}, 0x1c) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'dummy0\x00', <r6=>0x0}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0xfff2}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044091}, 0x40004) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x48044)
recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/92, 0x5c}, 0x40000040)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})

1.080421212s ago: executing program 0 (id=1597):
r0 = socket(0x10, 0x803, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f00000001c0)=""/106, &(0x7f0000000280)=0x6a)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r2)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe, {0x6, 0x0, 0xfcff}}, 0x14}, 0x1, 0x0, 0x0, 0x800a0}, 0x4000000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r7}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008001e4009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, r6, 0x1f, 0x30}, 0x20)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000240)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}]}, 0x0, 0xf}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff9500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r11, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r10)
getsockname$inet(r1, 0x0, &(0x7f0000000240))

1.080139362s ago: executing program 2 (id=1598):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24040880)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000002010400000000000000000a0000000400818004000380300002802c00018014000300ff02000000000000000000000000000114000400000000000000ffff7f00000100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnexthop={0x38, 0x6a, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
shutdown(r0, 0x1)

1.078939196s ago: executing program 2 (id=1599):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e2d, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)

1.000774659s ago: executing program 2 (id=1600):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8)
sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="3fb4a1c079680672ba87", 0xa}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x190}, 0xb29d5f770728d0e)

1.000153484s ago: executing program 2 (id=1601):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async, rerun: 32)
sendto$inet(r2, &(0x7f0000000000)="dffa0bce0d", 0x5, 0x0, &(0x7f0000001100)={0x2, 0x4e21, @loopback}, 0x10) (async, rerun: 32)
socket$kcm(0x29, 0x0, 0x0) (async)
close(0x3)
r3 = socket(0x2b, 0x1, 0x0)
listen(r3, 0x0) (async)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
listen(r3, 0x80c)

900.554395ms ago: executing program 2 (id=1602):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}, {&(0x7f0000000400)={0xe0, 0x3a, 0x100, 0x70bd2d, 0x25dfdbff, "", [@generic="b1d55b00485eebc68e14a7bd962d1697eb8f812129f26c0bb9e9ceaea64029ffc927dfe3f30ca95f696eda2f58fcf15c88d8a6262a838de1a1110d2036d128edec7fd871a3d542d3c23ac0cfa68bb2dc8564e92865d7afae2ed35e6cdfcd99b49bba699fe1378f7070482f1f8e6bf375c16d9207a6614e8b416ecd312d3b71a7bc39c9952efa6eee2a3179917b079936debf4a8c41ecfd1bc9034a809c3fc2d78612247b941943f6b0c9e8101a33fea90f97a4731447212600e4f631498fd3ad605fce25fbe4", @typed={0x8, 0xb0, 0x0, 0x0, @u32}]}, 0xe0}, {&(0x7f0000000100)={0x14, 0x11, 0x20, 0x70bd28, 0x25dfdbfb, "", [@nested={0x4, 0x11}]}, 0x14}], 0x3, 0x0, 0x0, 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a00000003000000000000000000000000000001050000002000000005000000000000110500000006000000006100302e616161610061002d30fd741a04d22f3fd813ca882a4e"], 0x0, 0x5c}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = socket(0x11, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xa0179e08})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c010000100013072dbd7000000100"/50, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc0100000000000000000000000000000300000000000000faffffffffffffff0700000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fefffffffffffffff8ffffffffffffff000000000000000000000000000000000800000000000000000000000a00010000000000000000004c001400686d6163286d643529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}}, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
socket$kcm(0x11, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000080)=0x80)
pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0)

898.120658ms ago: executing program 0 (id=1603):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r3, 0x54, 0x8aa, 0x7}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
r5 = socket(0x2, 0x3, 0x40)
setsockopt(r5, 0xff, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

737.745701ms ago: executing program 2 (id=1604):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aac56b894a8a1c51c7250000000000000000015a817f0000017f000001"], 0x0)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000004000020000052c00048028000180080001006f7366001c0002800800014000000009080003400000040105000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000300)=0x1, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

347.462096ms ago: executing program 3 (id=1605):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000061107400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080)=r1, 0xffffffffffffff85)
close(r0)

346.974198ms ago: executing program 3 (id=1606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000180)={0x4, 0x2, 0x8, 0x100}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0c0001800800010062000300"], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcfffd7f00000020000000000c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r11, 0x0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x4a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

259.904996ms ago: executing program 3 (id=1607):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, r0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x37b1f16274823e7b)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r8, 0x0, 0x0, 0x2}, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000680000000000000000000c000200010000000400000000000100000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002ea83b4aad27a7b9bd7000000000000a0000004c2597ad1d3dedb8833ce64b3427b5cd0f5193826e92f424523c2ef4", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r10, 0x0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x4a, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

208.908869ms ago: executing program 3 (id=1608):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000200000000000000000000000000001f5d556653d2287756a3acce2bffff4aa09872605d70ae7cf0df9d0ab1c93202e82fdb682a15828a488f390d9d830c49cd86d1964aa9c3bca3cb8924458983a5175f488625e0181f2292c7f37ef616f1c1e15446ab49ae830790017649de2a795425e35e7e095b2a1e85fe7cb385a3c0ba2b1cacd9c9b887fd5dcff45fca0bf64218bad1300ab747ab678c8d62c550bab309432122731a41c375111037147a998d860476a4a6f34c648f4e3af30000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) (async)
openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) (async)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket(0x10, 0x80002, 0x0)
socket$rds(0x15, 0x5, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0)
socket$kcm(0x2b, 0x1, 0x0) (async)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @null, 0x0, [@bcast, @rose, @null, @rose, @default, @bcast]}, &(0x7f0000000040)=0x40, 0x800) (async)
accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @null, 0x0, [@bcast, @rose, @null, @rose, @default, @bcast]}, &(0x7f0000000040)=0x40, 0x800)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)

149.924552ms ago: executing program 3 (id=1609):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x5c, r2, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x308}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x5c}}, 0x20000000)

0s ago: executing program 0 (id=1610):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r0, 0x8) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x5b}, 0x8) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
shutdown(r5, 0x1) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x9}, 0x8) (rerun: 32)
getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device=0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async)
write(r3, &(0x7f0000000140)="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"/297, 0x3accf8d5) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=<r8=>r7, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="d8030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3d8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$x25(r2, &(0x7f0000000080), 0x12) (async, rerun: 64)
vmsplice(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) (rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES64=r7], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
close(r2)

kernel console output (not intermixed with test programs):

 kstrndup+0xbf/0x160
[   82.352830][ T7176]  hwsim_new_radio_nl+0xea4/0x1b10
[   82.352847][ T7176]  ? __pfx___nla_validate_parse+0x10/0x10
[   82.352870][ T7176]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   82.352896][ T7176]  ? __nla_parse+0x40/0x60
[   82.352910][ T7176]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   82.352928][ T7176]  genl_family_rcv_msg_doit+0x215/0x300
[   82.352941][ T7176]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   82.352957][ T7176]  ? bpf_lsm_capable+0x9/0x20
[   82.352967][ T7176]  ? security_capable+0x7e/0x2e0
[   82.352982][ T7176]  genl_rcv_msg+0x60e/0x790
[   82.352994][ T7176]  ? __pfx_genl_rcv_msg+0x10/0x10
[   82.353004][ T7176]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   82.353020][ T7176]  netlink_rcv_skb+0x208/0x470
[   82.353027][ T7176]  ? __lock_acquire+0xab9/0xd20
[   82.353038][ T7176]  ? __pfx_genl_rcv_msg+0x10/0x10
[   82.353049][ T7176]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.353064][ T7176]  ? down_read+0x1ad/0x2e0
[   82.353074][ T7176]  genl_rcv+0x28/0x40
[   82.353082][ T7176]  netlink_unicast+0x82f/0x9e0
[   82.353098][ T7176]  ? __pfx_netlink_unicast+0x10/0x10
[   82.353110][ T7176]  ? netlink_sendmsg+0x642/0xb30
[   82.353116][ T7176]  ? skb_put+0x11b/0x210
[   82.353126][ T7176]  netlink_sendmsg+0x805/0xb30
[   82.353138][ T7176]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.353153][ T7176]  ? aa_sock_msg_perm+0xf1/0x1d0
[   82.353166][ T7176]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   82.353178][ T7176]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.353190][ T7176]  __sock_sendmsg+0x21c/0x270
[   82.353204][ T7176]  ____sys_sendmsg+0x505/0x830
[   82.353215][ T7176]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.353228][ T7176]  ? import_iovec+0x74/0xa0
[   82.353240][ T7176]  ___sys_sendmsg+0x21f/0x2a0
[   82.353250][ T7176]  ? __pfx____sys_sendmsg+0x10/0x10
[   82.353275][ T7176]  ? __fget_files+0x2a/0x420
[   82.353281][ T7176]  ? __fget_files+0x3a0/0x420
[   82.353291][ T7176]  __x64_sys_sendmsg+0x19b/0x260
[   82.353302][ T7176]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   82.353315][ T7176]  ? rcu_is_watching+0x15/0xb0
[   82.353325][ T7176]  ? do_syscall_64+0xbe/0x3b0
[   82.353336][ T7176]  do_syscall_64+0xfa/0x3b0
[   82.353343][ T7176]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.353350][ T7176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.353357][ T7176]  ? exc_page_fault+0x9f/0xf0
[   82.353365][ T7176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.353372][ T7176] RIP: 0033:0x7f7155d8ec29
[   82.353380][ T7176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.353386][ T7176] RSP: 002b:00007f7156c64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.353395][ T7176] RAX: ffffffffffffffda RBX: 00007f7155fd5fa0 RCX: 00007f7155d8ec29
[   82.353400][ T7176] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[   82.353404][ T7176] RBP: 00007f7155e11e41 R08: 0000000000000000 R09: 0000000000000000
[   82.353408][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.353432][ T7176] R13: 00007f7155fd6038 R14: 00007f7155fd5fa0 R15: 00007fff0ab88d78
[   82.353445][ T7176]  </TASK>
[   83.126692][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'.
[   83.334639][ T7207] openvswitch: netlink: Message has 8 unknown bytes.
[   83.403109][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'.
[   83.415338][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'.
[   83.425184][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'.
[   83.560884][ T5910] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   84.327112][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'.
[   84.469057][ T7255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.317'.
[   84.648462][ T7277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.696141][ T7287] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   84.702437][ T7286] IPVS: stopping backup sync thread 7287 ...
[   84.789670][ T7293] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   84.842519][ T7299] IPVS: stopping backup sync thread 7301 ...
[   84.851640][ T7302] geneve2: entered promiscuous mode
[   84.853524][ T7302] geneve2: entered allmulticast mode
[   84.860828][ T7303] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   84.913363][ T7311] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[   84.987657][ T7317] netlink: 'syz.2.334': attribute type 30 has an invalid length.
[   85.259992][ T7348] netlink: 'syz.1.339': attribute type 13 has an invalid length.
[   85.262698][ T7348] netlink: 'syz.1.339': attribute type 17 has an invalid length.
[   85.288804][ T7348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.638765][ T7402] __nla_validate_parse: 5 callbacks suppressed
[   86.638780][ T7402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.351'.
[   86.918569][ T7409] IPVS: stopping backup sync thread 7053 ...
[   87.004217][ T7418] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   87.008967][ T7417] IPVS: stopping backup sync thread 7418 ...
[   87.179080][ T7426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.182034][ T7426] IPv6: NLM_F_CREATE should be set when creating new route
[   87.240383][ T7428] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[   87.312699][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   87.426175][ T7444] netlink: 'syz.1.365': attribute type 13 has an invalid length.
[   87.429786][ T7444] netlink: 'syz.1.365': attribute type 17 has an invalid length.
[   87.434041][ T7446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.438366][ T7444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.467566][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'.
[   88.239101][ T7456] netlink: 'syz.1.371': attribute type 10 has an invalid length.
[   88.242286][ T7456] tipc: Resetting bearer <eth:team0>
[   88.251506][ T7456] team0: Cannot enslave team device to itself
[   88.273093][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'.
[   88.281382][ T7458] netlink: 'syz.0.372': attribute type 2 has an invalid length.
[   88.586088][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'.
[   88.608694][ T7478] netlink: 248 bytes leftover after parsing attributes in process `syz.2.378'.
[   88.666728][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[   88.682455][ T7483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.685207][ T7483] IPv6: NLM_F_CREATE should be set when creating new route
[   88.836913][ T7496] netlink: 'syz.2.381': attribute type 13 has an invalid length.
[   88.840278][ T7496] netlink: 'syz.2.381': attribute type 17 has an invalid length.
[   88.909263][ T7496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.989537][ T7496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.049518][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.609859][ T7526] netlink: 'syz.0.387': attribute type 4 has an invalid length.
[   89.709967][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.388'.
[   89.760797][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'.
[   90.035838][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'.
[   90.319609][ T7567] netlink: 'syz.2.393': attribute type 9 has an invalid length.
[   90.511086][ T7581] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   90.681250][ T7592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.683999][ T7592] IPv6: NLM_F_CREATE should be set when creating new route
[   90.723044][ T7599] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0
[   90.723120][ T7598] IPVS: stopping backup sync thread 7599 ...
[   90.810269][ T7608] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   90.814500][ T7608] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   90.951764][ T7616] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[   90.957931][ T7616] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[   91.059364][ T7621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   91.062517][ T7621] IPv6: NLM_F_CREATE should be set when creating new route
[   91.321687][ T7627] netlink: 'syz.2.411': attribute type 9 has an invalid length.
[   91.333535][ T7627] netlink: 'syz.2.411': attribute type 7 has an invalid length.
[   91.444578][ T7633] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   91.829524][ T7642] IPVS: stopping backup sync thread 7303 ...
[   92.757438][ T7674] IPVS: stopping backup sync thread 7633 ...
[   93.017085][ T7687] __nla_validate_parse: 8 callbacks suppressed
[   93.017100][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'.
[   93.031239][ T7687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.034132][ T7687] IPv6: NLM_F_CREATE should be set when creating new route
[   93.629879][ T7701] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   93.629917][ T7700] IPVS: stopping backup sync thread 7701 ...
[   93.786317][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'.
[   93.907479][ T7697] netlink: 256 bytes leftover after parsing attributes in process `syz.1.430'.
[   93.959551][ T7711] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   93.963264][ T7711] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   94.074417][ T7721] netlink: 248 bytes leftover after parsing attributes in process `syz.2.438'.
[   94.172437][ T7727] netlink: 248 bytes leftover after parsing attributes in process `syz.2.439'.
[   94.242356][ T7733] netlink: 204 bytes leftover after parsing attributes in process `syz.2.440'.
[   94.247195][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'.
[   94.867808][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'.
[   94.871751][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'.
[   94.884568][   T33] audit: type=1107 audit(1758551540.397:3): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   95.443977][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.451'.
[   95.738317][ T7836] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   95.742551][ T7834] IPVS: stopping backup sync thread 7836 ...
[   96.248951][ T7852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.252144][ T7852] IPv6: NLM_F_CREATE should be set when creating new route
[   96.641916][ T7872] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   96.653751][ T7872] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   97.234693][ T7903] IPVS: stopping backup sync thread 7904 ...
[   97.237196][ T7904] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   97.413502][ T7875] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   97.417785][ T7875] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   97.499955][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.502413][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.507833][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.510212][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.512968][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.517927][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.520678][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.523033][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.529871][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.533504][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.537256][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.540428][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.543910][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.550547][ T7929] tun0: tun_chr_ioctl cmd 1074025675
[   97.552864][ T7929] tun0: persist enabled
[   97.568225][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.576459][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.580990][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.589593][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.591963][ T7930] tun0: tun_chr_ioctl cmd 1074025673
[   97.671975][ T7953] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   97.676469][ T7953] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   97.869028][ T7971] syzkaller1: entered promiscuous mode
[   97.871535][ T7971] syzkaller1: entered allmulticast mode
[   97.928620][ T7977] syzkaller1: left promiscuous mode
[   97.932797][ T7976] Bluetooth: MGMT ver 1.23
[   97.939135][ T7977] syzkaller1: left allmulticast mode
[   97.992347][ T7976] validate_nla: 1 callbacks suppressed
[   97.992357][ T7976] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[   98.412128][ T7995] __nla_validate_parse: 8 callbacks suppressed
[   98.412144][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[   98.625345][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[   98.627627][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   99.208370][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   99.213111][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   99.219441][ T8035] netlink: 124 bytes leftover after parsing attributes in process `syz.2.497'.
[   99.287544][ T8041] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   99.292822][ T8041] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   99.325866][ T8043] netlink: 248 bytes leftover after parsing attributes in process `syz.2.500'.
[   99.815434][ T8059] netlink: 'syz.1.503': attribute type 9 has an invalid length.
[   99.818009][ T8059] netlink: 224 bytes leftover after parsing attributes in process `syz.1.503'.
[   99.832781][ T8059] netlink: 'syz.1.503': attribute type 1 has an invalid length.
[   99.836481][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[   99.915895][ T8066] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   99.922755][ T8064] IPVS: stopping backup sync thread 8066 ...
[   99.986777][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[   99.990062][ T5853] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  100.310692][ T8084] netlink: 248 bytes leftover after parsing attributes in process `syz.2.506'.
[  100.362336][ T8093] netlink: 248 bytes leftover after parsing attributes in process `syz.1.508'.
[  100.372242][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'.
[  100.526192][ T8107] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  100.529182][ T8107] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  100.607933][ T8113] netlink: 'syz.0.510': attribute type 13 has an invalid length.
[  100.611902][ T8113] netlink: 'syz.0.510': attribute type 17 has an invalid length.
[  100.639232][ T8113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.344785][ T8104] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  101.349826][ T8104] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  101.647665][ T8163] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  101.651656][ T8161] IPVS: stopping backup sync thread 8163 ...
[  102.282347][ T8203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  102.285459][ T8203] IPv6: NLM_F_CREATE should be set when creating new route
[  102.395896][ T8206] netlink: 'syz.2.526': attribute type 4 has an invalid length.
[  103.000591][ T8261] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  103.003830][ T8261] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  103.035364][ T8265] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  103.041635][ T8264] IPVS: stopping backup sync thread 8265 ...
[  103.096373][ T8270] IPVS: length: 125 != 8
[  103.927963][ T8301] __nla_validate_parse: 12 callbacks suppressed
[  103.927977][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[  104.010089][ T8310] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  104.010136][ T8309] IPVS: stopping backup sync thread 8310 ...
[  104.146897][ T8319] block nbd0: server does not support multiple connections per device.
[  104.150517][ T8319] block nbd0: shutting down sockets
[  104.332450][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'.
[  104.337666][ T8344] nbd: must specify at least one socket
[  104.888168][ T8379] dvmrp8: entered allmulticast mode
[  104.891673][ T8378] dvmrp8: left allmulticast mode
[  105.443564][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.448614][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.452072][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.456626][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.459975][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.563524][ T8401] chnl_net:caif_netlink_parms(): no params data found
[  105.610763][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.613354][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.616402][ T8401] bridge_slave_0: entered allmulticast mode
[  105.619309][ T8401] bridge_slave_0: entered promiscuous mode
[  105.622964][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.626339][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.628722][ T8401] bridge_slave_1: entered allmulticast mode
[  105.631538][ T8401] bridge_slave_1: entered promiscuous mode
[  105.650473][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.656453][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.679018][ T8401] team0: Port device team_slave_0 added
[  105.683216][ T8401] team0: Port device team_slave_1 added
[  105.703548][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.706686][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.716913][ T8401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.721672][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.724023][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.733587][ T8401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.766155][ T8401] hsr_slave_0: entered promiscuous mode
[  105.768502][ T8401] hsr_slave_1: entered promiscuous mode
[  105.770772][ T8401] debugfs: 'hsr0' already exists in 'hsr'
[  105.772837][ T8401] Cannot create hsr debugfs directory
[  105.870511][ T8401] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.876342][ T8401] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.882004][ T8401] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.886372][ T8401] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.966873][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.983949][ T8401] 8021q: adding VLAN 0 to HW filter on device team0
[  105.998938][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.001853][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.013525][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.016708][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.168574][ T8401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.206605][ T8401] veth0_vlan: entered promiscuous mode
[  106.211928][ T8401] veth1_vlan: entered promiscuous mode
[  106.226079][ T8401] veth0_macvtap: entered promiscuous mode
[  106.231815][ T8401] veth1_macvtap: entered promiscuous mode
[  106.248832][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.256669][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.263355][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.269337][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.284718][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.289019][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.308548][ T8437] netlink: 'syz.2.578': attribute type 6 has an invalid length.
[  106.353246][ T8437] netlink: 'syz.2.578': attribute type 12 has an invalid length.
[  106.357196][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.359381][ T8437] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.578'.
[  106.361355][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.419541][ T8437] netlink: 228 bytes leftover after parsing attributes in process `syz.2.578'.
[  106.423328][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.426941][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.598475][ T8450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.672479][ T8450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.752921][ T8450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.813363][ T8450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.925808][ T8475] netlink: 'syz.3.587': attribute type 1 has an invalid length.
[  106.931095][ T8475] batadv_slave_0: entered promiscuous mode
[  107.007467][ T8478] IPVS: stopping backup sync thread 8482 ...
[  107.007639][ T8482] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  107.064018][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.083889][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.092043][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.096831][ T8486] netlink: 'syz.0.589': attribute type 4 has an invalid length.
[  107.103123][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.142424][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  107.168092][ T8492] netlink: 248 bytes leftover after parsing attributes in process `syz.0.591'.
[  107.197629][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'.
[  107.507930][ T5853] Bluetooth: hci0: command tx timeout
[  107.748063][ T8473] batadv_slave_0: left promiscuous mode
[  107.961923][ T8536] can: request_module (can-proto-0) failed.
[  108.218896][ T8558] trusted_key: syz.0.604 sent an empty control message without MSG_MORE.
[  108.440311][ T8576] netlink: 248 bytes leftover after parsing attributes in process `syz.0.607'.
[  108.620876][ T8587] netlink: 248 bytes leftover after parsing attributes in process `syz.0.609'.
[  108.678987][ T8587] netlink: 76 bytes leftover after parsing attributes in process `syz.0.609'.
[  108.757726][ T8593] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  108.762716][ T8592] IPVS: stopping backup sync thread 8593 ...
[  108.862803][ T8598] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  109.054247][ T8626] netlink: 20896 bytes leftover after parsing attributes in process `syz.3.616'.
[  109.095519][ T8631] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  109.371931][ T8665] netlink: 248 bytes leftover after parsing attributes in process `syz.3.625'.
[  109.472235][ T8674] netlink: 248 bytes leftover after parsing attributes in process `syz.3.627'.
[  109.585429][ T5853] Bluetooth: hci0: command tx timeout
[  109.775677][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'.
[  110.606994][ T8709] netlink: 'syz.0.632': attribute type 21 has an invalid length.
[  110.637362][ T8709] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  110.668205][ T8712] netlink: 'syz.3.633': attribute type 10 has an invalid length.
[  110.703910][ T8712] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  110.766726][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'.
[  110.769692][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'.
[  110.844297][ T8726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.635'.
[  110.991555][ T8742] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  111.008136][ T8741] IPVS: stopping backup sync thread 8742 ...
[  111.675211][   T54] Bluetooth: hci0: command tx timeout
[  112.027771][ T8809] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  112.198303][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'.
[  112.402547][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  112.407187][ T8851] netlink: 'syz.0.653': attribute type 20 has an invalid length.
[  112.410061][ T8851] netlink: 'syz.0.653': attribute type 21 has an invalid length.
[  112.499459][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.654'.
[  113.746543][   T54] Bluetooth: hci0: command tx timeout
[  114.368981][ T8997] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  114.372987][ T8997] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  114.632886][ T9006] __nla_validate_parse: 7 callbacks suppressed
[  114.632895][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'.
[  114.647832][ T5875] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.647864][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'.
[  114.656532][ T5875] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.672207][ T5875] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.685364][ T5875] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.784100][ T9019] netlink: 248 bytes leftover after parsing attributes in process `syz.3.680'.
[  114.816943][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[  114.870051][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'.
[  115.273930][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.278602][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.382635][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.397059][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.493525][ T5875] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.496817][ T9054] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  115.498450][ T5875] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.504286][ T5875] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.508160][ T5875] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.508535][ T9054] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  115.518010][ T5875] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.522057][ T5875] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.527527][ T5875] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.531423][ T5875] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.825037][   T54] Bluetooth: hci0: command tx timeout
[  116.084523][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'.
[  116.087750][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'.
[  116.092342][ T9102] netlink: 'syz.3.690': attribute type 14 has an invalid length.
[  116.095384][ T9102] netlink: 'syz.3.690': attribute type 11 has an invalid length.
[  116.179254][ T9113] netlink: 'syz.0.692': attribute type 1 has an invalid length.
[  116.181844][ T9113] netlink: 224 bytes leftover after parsing attributes in process `syz.0.692'.
[  116.278276][ T9120] !: renamed from dummy0
[  116.480612][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'.
[  116.497672][ T9135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.500484][ T9135] IPv6: NLM_F_CREATE should be set when creating new route
[  116.622941][ T9141] netlink: 'syz.2.698': attribute type 1 has an invalid length.
[  116.632465][ T9141] netlink: 224 bytes leftover after parsing attributes in process `syz.2.698'.
[  117.682046][ T9218] netlink: 'syz.3.702': attribute type 4 has an invalid length.
[  118.004044][ T9247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.007264][ T9247] IPv6: NLM_F_CREATE should be set when creating new route
[  118.396122][ T5853] Bluetooth: hci0: command 0x0405 tx timeout
[  119.400373][ T9320] netlink: 'syz.0.722': attribute type 15 has an invalid length.
[  119.454294][ T9320] IPVS: persistence engine module ip_vs_pe_ not found
[  119.475872][    T9] IPVS: starting estimator thread 0...
[  119.552530][ T9334] netlink: 'syz.3.727': attribute type 3 has an invalid length.
[  119.578120][ T9328] IPVS: using max 43 ests per chain, 103200 per kthread
[  120.101590][ T9380] __nla_validate_parse: 7 callbacks suppressed
[  120.101605][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'.
[  120.138834][ T9380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.141285][ T9380] IPv6: NLM_F_CREATE should be set when creating new route
[  120.771996][ T9407] netlink: 248 bytes leftover after parsing attributes in process `syz.3.738'.
[  121.144663][ T9435] netlink: 248 bytes leftover after parsing attributes in process `syz.3.741'.
[  121.362559][ T9444] netlink: 248 bytes leftover after parsing attributes in process `syz.3.743'.
[  121.556206][ T9452] block nbd1: server does not support multiple connections per device.
[  121.565722][ T9452] block nbd1: shutting down sockets
[  121.709367][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'.
[  121.744425][ T9456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.747549][ T9456] IPv6: NLM_F_CREATE should be set when creating new route
[  121.845523][ T9461] Bluetooth: MGMT ver 1.23
[  121.959903][ T9466] netlink: 248 bytes leftover after parsing attributes in process `syz.3.748'.
[  122.620793][ T9490] netlink: 92 bytes leftover after parsing attributes in process `syz.2.753'.
[  122.666346][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'.
[  122.709255][ T9502] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  122.726084][ T9501] IPVS: stopping backup sync thread 9502 ...
[  122.809371][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'.
[  122.889865][ T9519] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20002
[  123.168619][ T9540] netlink: 248 bytes leftover after parsing attributes in process `syz.2.763'.
[  123.746992][ T9578] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  123.761091][ T9578] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  124.579045][ T9579] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  124.582179][ T9579] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  124.640158][ T9618] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  124.643844][ T9618] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  125.097184][ T9638] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  125.105617][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: syz.2.780 Not tainted syzkaller #0 PREEMPT(full) 
[  125.105628][ T9638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.105632][ T9638] Call Trace:
[  125.105635][ T9638]  <TASK>
[  125.105639][ T9638]  dump_stack_lvl+0x189/0x250
[  125.105654][ T9638]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.105663][ T9638]  ? __pfx__printk+0x10/0x10
[  125.105676][ T9638]  ? kernfs_path_from_node+0x2f/0x290
[  125.105685][ T9638]  ? kernfs_path_from_node+0x250/0x290
[  125.105692][ T9638]  ? kernfs_path_from_node+0x2f/0x290
[  125.105702][ T9638]  sysfs_warn_dup+0x8e/0xa0
[  125.105709][ T9638]  sysfs_do_create_link_sd+0xc0/0x110
[  125.105718][ T9638]  device_add_class_symlinks+0x1cf/0x240
[  125.105730][ T9638]  device_add+0x475/0xb50
[  125.105740][ T9638]  wiphy_register+0x1ba6/0x28d0
[  125.105756][ T9638]  ? __pfx_wiphy_register+0x10/0x10
[  125.105763][ T9638]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  125.105776][ T9638]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  125.105788][ T9638]  ieee80211_register_hw+0x3484/0x4100
[  125.105804][ T9638]  ? ieee80211_register_hw+0x13f1/0x4100
[  125.105817][ T9638]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  125.105828][ T9638]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.105843][ T9638]  ? __hrtimer_setup+0x187/0x210
[  125.105850][ T9638]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  125.105859][ T9638]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  125.105882][ T9638]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  125.105892][ T9638]  ? trace_kmalloc+0x1f/0xd0
[  125.105900][ T9638]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  125.105910][ T9638]  ? kstrndup+0xbf/0x160
[  125.105923][ T9638]  hwsim_new_radio_nl+0xea4/0x1b10
[  125.105936][ T9638]  ? __pfx___nla_validate_parse+0x10/0x10
[  125.105950][ T9638]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  125.105965][ T9638]  ? __nla_parse+0x40/0x60
[  125.105974][ T9638]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  125.106022][ T9638]  genl_family_rcv_msg_doit+0x215/0x300
[  125.106036][ T9638]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  125.106052][ T9638]  ? bpf_lsm_capable+0x9/0x20
[  125.106068][ T9638]  ? security_capable+0x7e/0x2e0
[  125.106082][ T9638]  genl_rcv_msg+0x60e/0x790
[  125.106095][ T9638]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.106105][ T9638]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  125.106121][ T9638]  netlink_rcv_skb+0x208/0x470
[  125.106128][ T9638]  ? __lock_acquire+0xab9/0xd20
[  125.106141][ T9638]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.106156][ T9638]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.106180][ T9638]  ? down_read+0x1ad/0x2e0
[  125.106197][ T9638]  genl_rcv+0x28/0x40
[  125.106210][ T9638]  netlink_unicast+0x82f/0x9e0
[  125.106234][ T9638]  ? __pfx_netlink_unicast+0x10/0x10
[  125.106254][ T9638]  ? netlink_sendmsg+0x642/0xb30
[  125.106265][ T9638]  ? skb_put+0x11b/0x210
[  125.106277][ T9638]  netlink_sendmsg+0x805/0xb30
[  125.106288][ T9638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.106298][ T9638]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.106307][ T9638]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.106316][ T9638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.106325][ T9638]  __sock_sendmsg+0x21c/0x270
[  125.106337][ T9638]  ____sys_sendmsg+0x505/0x830
[  125.106349][ T9638]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.106362][ T9638]  ? import_iovec+0x74/0xa0
[  125.106373][ T9638]  ___sys_sendmsg+0x21f/0x2a0
[  125.106383][ T9638]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.106406][ T9638]  ? __fget_files+0x2a/0x420
[  125.106412][ T9638]  ? __fget_files+0x3a0/0x420
[  125.106423][ T9638]  __x64_sys_sendmsg+0x19b/0x260
[  125.106433][ T9638]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.106446][ T9638]  ? rcu_is_watching+0x15/0xb0
[  125.106456][ T9638]  ? do_syscall_64+0xbe/0x3b0
[  125.106466][ T9638]  do_syscall_64+0xfa/0x3b0
[  125.106473][ T9638]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.106483][ T9638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.106494][ T9638]  ? exc_page_fault+0x9f/0xf0
[  125.106506][ T9638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.106516][ T9638] RIP: 0033:0x7f7155d8ec29
[  125.106529][ T9638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.106539][ T9638] RSP: 002b:00007f7156c64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.106552][ T9638] RAX: ffffffffffffffda RBX: 00007f7155fd5fa0 RCX: 00007f7155d8ec29
[  125.106560][ T9638] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  125.106569][ T9638] RBP: 00007f7155e11e41 R08: 0000000000000000 R09: 0000000000000000
[  125.106576][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.106582][ T9638] R13: 00007f7155fd6038 R14: 00007f7155fd5fa0 R15: 00007fff0ab88d78
[  125.106596][ T9638]  </TASK>
[  125.297593][ T9641] __nla_validate_parse: 6 callbacks suppressed
[  125.297603][ T9641] netlink: 56 bytes leftover after parsing attributes in process `syz.2.780'.
[  125.438243][ T9657] syzkaller0: entered promiscuous mode
[  125.440224][ T9657] syzkaller0: entered allmulticast mode
[  125.443903][ T9656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.462244][ T9656] tipc: Resetting bearer <eth:syzkaller0>
[  125.473451][ T9656] tipc: Disabling bearer <eth:syzkaller0>
[  125.534813][ T9663] netlink: 84 bytes leftover after parsing attributes in process `syz.3.785'.
[  126.334809][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  126.523364][ T9717] netlink: 248 bytes leftover after parsing attributes in process `syz.3.793'.
[  126.637222][ T9720] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  126.801572][ T9730] syzkaller1: entered promiscuous mode
[  126.804198][ T9730] syzkaller1: entered allmulticast mode
[  127.024552][ T9733] netlink: 'syz.0.797': attribute type 303 has an invalid length.
[  127.042294][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[  127.068820][ T9733] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  127.093096][ T9733] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  127.334648][ T9749] IPVS: stopping backup sync thread 9750 ...
[  127.334756][ T9750] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  127.350233][ T9749] xt_l2tp: missing protocol rule (udp|l2tpip)
[  127.550187][ T9765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.802'.
[  127.763514][ T9778] netlink: 'syz.3.805': attribute type 12 has an invalid length.
[  127.768906][ T9778] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.805'.
[  127.888146][ T9789] syz_tun: entered allmulticast mode
[  127.891892][ T9790] syz_tun: left allmulticast mode
[  127.933824][ T9789] IPVS: persistence engine module ip_vs_pe_ not found
[  127.983371][ T9790] IPVS: persistence engine module ip_vs_pe_ not found
[  128.057488][ T9800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.060600][ T9800] IPv6: NLM_F_CREATE should be set when creating new route
[  128.099674][ T9804] netlink: 248 bytes leftover after parsing attributes in process `syz.2.811'.
[  128.216086][ T9810] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  128.332281][ T5858] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  128.360361][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'.
[  128.480696][ T9847] netlink: 'syz.0.820': attribute type 3 has an invalid length.
[  128.487081][ T9847] netlink: 'syz.0.820': attribute type 1 has an invalid length.
[  128.505198][ T9847] netlink: 'syz.0.820': attribute type 6 has an invalid length.
[  129.149873][ T9868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'.
[  129.448163][ T9898] IPVS: persistence engine module ip_vs_pe_ not found
[  129.766243][ T9923] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  129.770916][ T9922] IPVS: stopping backup sync thread 9923 ...
[  129.828123][ T9926] netlink: 'syz.0.837': attribute type 11 has an invalid length.
[  129.890460][ T9930] netlink: 'syz.0.837': attribute type 21 has an invalid length.
[  130.613193][ T9964] __nla_validate_parse: 5 callbacks suppressed
[  130.613206][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'.
[  130.639525][ T9964] IPVS: persistence engine module ip_vs_pe_ not found
[  130.864523][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'.
[  130.878022][ T9981] netlink: 248 bytes leftover after parsing attributes in process `syz.3.845'.
[  131.057522][ T9997] IPVS: stopping backup sync thread 9999 ...
[  131.063962][ T9999] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  131.070041][ T9996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.073422][ T9996] syzkaller0: entered promiscuous mode
[  131.076109][ T9996] syzkaller0: entered allmulticast mode
[  131.104135][ T9997] tipc: Resetting bearer <eth:syzkaller0>
[  131.131488][ T9997] tipc: Disabling bearer <eth:syzkaller0>
[  131.237036][T10010] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  131.322404][T10015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.854'.
[  131.334587][T10016] sctp: [Deprecated]: syz.2.855 (pid 10016) Use of int in max_burst socket option deprecated.
[  131.334587][T10016] Use struct sctp_assoc_value instead
[  131.348508][T10015] batadv1: entered promiscuous mode
[  131.350682][T10015] batadv1: entered allmulticast mode
[  131.364372][T10019] netdevsim netdevsim3: loading /lib/firmware// failed with error -22
[  131.370483][T10019] netdevsim netdevsim3: Direct firmware load for / failed with error -22
[  131.375309][T10019] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  131.674206][T10044] netlink: 248 bytes leftover after parsing attributes in process `syz.0.860'.
[  131.913892][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'.
[  131.965110][T10065] netlink: 248 bytes leftover after parsing attributes in process `syz.0.864'.
[  132.241772][T10091] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  132.298244][T10096] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  132.311520][T10096] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  132.341937][T10099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.475872][T10110] netlink: 'syz.0.874': attribute type 5 has an invalid length.
[  132.487996][T10110] netlink: 'syz.0.874': attribute type 7 has an invalid length.
[  132.535212][T10110] : entered promiscuous mode
[  132.788179][T10128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.876'.
[  132.821750][T10129] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  132.830025][T10129] CPU: 0 UID: 0 PID: 10129 Comm: syz.2.877 Not tainted syzkaller #0 PREEMPT(full) 
[  132.830042][T10129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.830049][T10129] Call Trace:
[  132.830054][T10129]  <TASK>
[  132.830060][T10129]  dump_stack_lvl+0x189/0x250
[  132.830103][T10129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.830118][T10129]  ? __pfx__printk+0x10/0x10
[  132.830138][T10129]  ? kernfs_path_from_node+0x2f/0x290
[  132.830152][T10129]  ? kernfs_path_from_node+0x250/0x290
[  132.830164][T10129]  ? kernfs_path_from_node+0x2f/0x290
[  132.830179][T10129]  sysfs_warn_dup+0x8e/0xa0
[  132.830192][T10129]  sysfs_do_create_link_sd+0xc0/0x110
[  132.830206][T10129]  device_add_class_symlinks+0x1cf/0x240
[  132.830224][T10129]  device_add+0x475/0xb50
[  132.830242][T10129]  wiphy_register+0x1ba6/0x28d0
[  132.830267][T10129]  ? __pfx_wiphy_register+0x10/0x10
[  132.830279][T10129]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  132.830300][T10129]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  132.830338][T10129]  ieee80211_register_hw+0x3484/0x4100
[  132.830366][T10129]  ? ieee80211_register_hw+0x13f1/0x4100
[  132.830386][T10129]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  132.830404][T10129]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.830428][T10129]  ? __hrtimer_setup+0x187/0x210
[  132.830439][T10129]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  132.830453][T10129]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  132.830493][T10129]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  132.830510][T10129]  ? trace_kmalloc+0x1f/0xd0
[  132.830524][T10129]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  132.830540][T10129]  ? kstrndup+0xbf/0x160
[  132.830561][T10129]  hwsim_new_radio_nl+0xea4/0x1b10
[  132.830581][T10129]  ? __pfx___nla_validate_parse+0x10/0x10
[  132.830605][T10129]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.830630][T10129]  ? __nla_parse+0x40/0x60
[  132.830645][T10129]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  132.830669][T10129]  genl_family_rcv_msg_doit+0x215/0x300
[  132.830691][T10129]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  132.830718][T10129]  ? bpf_lsm_capable+0x9/0x20
[  132.830734][T10129]  ? security_capable+0x7e/0x2e0
[  132.830757][T10129]  genl_rcv_msg+0x60e/0x790
[  132.830776][T10129]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.830791][T10129]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.830819][T10129]  netlink_rcv_skb+0x208/0x470
[  132.830830][T10129]  ? __lock_acquire+0xab9/0xd20
[  132.830848][T10129]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.830864][T10129]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  132.830920][T10129]  ? down_read+0x1ad/0x2e0
[  132.830937][T10129]  genl_rcv+0x28/0x40
[  132.830951][T10129]  netlink_unicast+0x82f/0x9e0
[  132.830983][T10129]  ? __pfx_netlink_unicast+0x10/0x10
[  132.831003][T10129]  ? netlink_sendmsg+0x642/0xb30
[  132.831014][T10129]  ? skb_put+0x11b/0x210
[  132.831032][T10129]  netlink_sendmsg+0x805/0xb30
[  132.831052][T10129]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.831067][T10129]  ? aa_sock_msg_perm+0xf1/0x1d0
[  132.831081][T10129]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.831093][T10129]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.831106][T10129]  __sock_sendmsg+0x21c/0x270
[  132.831127][T10129]  ____sys_sendmsg+0x505/0x830
[  132.831147][T10129]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.831170][T10129]  ? import_iovec+0x74/0xa0
[  132.831189][T10129]  ___sys_sendmsg+0x21f/0x2a0
[  132.831206][T10129]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.831250][T10129]  ? __fget_files+0x2a/0x420
[  132.831261][T10129]  ? __fget_files+0x3a0/0x420
[  132.831280][T10129]  __x64_sys_sendmsg+0x19b/0x260
[  132.831298][T10129]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.831320][T10129]  ? rcu_is_watching+0x15/0xb0
[  132.831337][T10129]  ? do_syscall_64+0xbe/0x3b0
[  132.831353][T10129]  do_syscall_64+0xfa/0x3b0
[  132.831364][T10129]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.831374][T10129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.831385][T10129]  ? exc_page_fault+0x9f/0xf0
[  132.831398][T10129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.831408][T10129] RIP: 0033:0x7f7155d8ec29
[  132.831420][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.831428][T10129] RSP: 002b:00007f7156c64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.831442][T10129] RAX: ffffffffffffffda RBX: 00007f7155fd5fa0 RCX: 00007f7155d8ec29
[  132.831450][T10129] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e
[  132.831457][T10129] RBP: 00007f7155e11e41 R08: 0000000000000000 R09: 0000000000000000
[  132.831463][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.831470][T10129] R13: 00007f7155fd6038 R14: 00007f7155fd5fa0 R15: 00007fff0ab88d78
[  132.831490][T10129]  </TASK>
[  132.872986][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'.
[  133.052087][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'.
[  133.298042][T10154] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  133.312745][T10154] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  133.359822][T10158] IPVS: stopping backup sync thread 10091 ...
[  133.695675][T10184] tipc: Started in network mode
[  133.700053][T10184] tipc: Node identity ac14142f, cluster identity 4711
[  133.704182][T10184] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  134.380109][T10202] netlink: 'syz.3.888': attribute type 1 has an invalid length.
[  134.397183][T10202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.466439][T10188] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  134.468738][T10188] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  134.492743][T10188] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  134.497388][T10188] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  134.504369][T10188] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  134.510355][T10188] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  134.562587][T10209] IPVS: stopping backup sync thread 10210 ...
[  134.564530][T10210] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  134.661185][T10215] IPVS: Scheduler module ip_vs_sip not found
[  134.891119][T10228] IPVS: Scheduler module ip_vs_sip not found
[  134.953396][T10237] tun1: tun_chr_ioctl cmd 1074025675
[  134.958615][T10237] tun1: persist enabled
[  134.963665][T10237] tun1: tun_chr_ioctl cmd 1074025675
[  134.995133][T10237] tun1: persist enabled
[  134.999235][T10237] tun1: tun_chr_ioctl cmd 1074025673
[  135.047426][T10244] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  135.050616][T10244] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  135.122738][T10250] netlink: 'syz.0.900': attribute type 3 has an invalid length.
[  135.785977][T10284] xt_policy: too many policy elements
[  135.824290][T10284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  135.911998][T10294] __nla_validate_parse: 6 callbacks suppressed
[  135.912013][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'.
[  135.960803][T10294] netlink: 'syz.3.905': attribute type 4 has an invalid length.
[  136.194031][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'.
[  136.225164][T10309] netlink: 'syz.0.908': attribute type 2 has an invalid length.
[  136.228506][T10309] netlink: 'syz.0.908': attribute type 1 has an invalid length.
[  136.231785][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'.
[  136.381360][T10321] netlink: 'syz.0.912': attribute type 3 has an invalid length.
[  136.415443][T10323] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  136.547839][T10336] netlink: 348 bytes leftover after parsing attributes in process `syz.3.916'.
[  136.572317][T10333] netlink: 'syz.0.915': attribute type 30 has an invalid length.
[  136.599102][T10341] netlink: 248 bytes leftover after parsing attributes in process `syz.3.917'.
[  136.708640][T10346] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  136.718608][T10345] IPVS: stopping backup sync thread 10346 ...
[  136.726531][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'.
[  136.739979][T10345] team_slave_0: entered promiscuous mode
[  136.742295][T10345] team_slave_1: entered promiscuous mode
[  136.749190][T10345] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  137.104491][T10372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.925'.
[  138.341357][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'.
[  138.887562][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.940'.
[  138.891100][T10421] netlink: 'syz.3.941': attribute type 1 has an invalid length.
[  139.011199][T10424] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  139.021210][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.944'.
[  139.024936][T10428] nbd: must specify at least one socket
[  140.250260][T10462] IPVS: set_ctl: invalid protocol: 34213 0.0.0.0:20000
[  140.609326][T10512] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20003
[  140.792880][T10536] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  140.795239][T10535] IPVS: stopping backup sync thread 10536 ...
[  140.851751][T10543] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  140.887701][T10547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.973534][T10551] IPVS: Scheduler module ip_vs_sip not found
[  141.151008][T10563] IPVS: stopping backup sync thread 10543 ...
[  141.431773][T10572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.838710][T10586] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  141.843256][T10584] IPVS: stopping backup sync thread 10586 ...
[  142.145203][T10602] block nbd1: server does not support multiple connections per device.
[  142.150990][T10602] block nbd1: shutting down sockets
[  142.196839][T10604] __nla_validate_parse: 4 callbacks suppressed
[  142.196854][T10604] netlink: 248 bytes leftover after parsing attributes in process `syz.2.993'.
[  142.427319][T10612] macvtap2: entered allmulticast mode
[  142.630904][T10624] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  142.669233][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'.
[  142.673196][T10623] netlink: 'syz.2.996': attribute type 3 has an invalid length.
[  142.751379][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'.
[  142.964490][T10647] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  143.062143][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1006'.
[  143.069685][T10657] netlink: 'syz.2.1006': attribute type 3 has an invalid length.
[  143.194525][T10677] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  143.198591][T10675] IPVS: stopping backup sync thread 10677 ...
[  143.423028][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1017'.
[  143.428942][T10694] netlink: 'syz.0.1017': attribute type 3 has an invalid length.
[  143.679289][T10705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1020'.
[  143.687264][T10705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1020'.
[  143.691057][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1020'.
[  144.181067][T10730] IPVS: stopping backup sync thread 10624 ...
[  144.333123][T10743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1033'.
[  144.415345][T10743] block nbd1: server does not support multiple connections per device.
[  144.419197][T10743] block nbd1: shutting down sockets
[  144.489496][T10753] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1035'.
[  144.714259][T10763] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  145.011611][T10773] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  145.017624][T10773] CPU: 1 UID: 0 PID: 10773 Comm: syz.0.1039 Not tainted syzkaller #0 PREEMPT(full) 
[  145.017644][T10773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.017650][T10773] Call Trace:
[  145.017656][T10773]  <TASK>
[  145.017663][T10773]  dump_stack_lvl+0x189/0x250
[  145.017686][T10773]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.017703][T10773]  ? __pfx__printk+0x10/0x10
[  145.017724][T10773]  ? kernfs_path_from_node+0x2f/0x290
[  145.017738][T10773]  ? kernfs_path_from_node+0x250/0x290
[  145.017781][T10773]  ? kernfs_path_from_node+0x2f/0x290
[  145.017797][T10773]  sysfs_warn_dup+0x8e/0xa0
[  145.017810][T10773]  sysfs_do_create_link_sd+0xc0/0x110
[  145.017826][T10773]  device_add_class_symlinks+0x1cf/0x240
[  145.017847][T10773]  device_add+0x475/0xb50
[  145.017864][T10773]  wiphy_register+0x1ba6/0x28d0
[  145.017890][T10773]  ? __pfx_wiphy_register+0x10/0x10
[  145.017904][T10773]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  145.017926][T10773]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  145.017946][T10773]  ieee80211_register_hw+0x3484/0x4100
[  145.017973][T10773]  ? ieee80211_register_hw+0x13f1/0x4100
[  145.017996][T10773]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  145.018014][T10773]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.018039][T10773]  ? __hrtimer_setup+0x187/0x210
[  145.018052][T10773]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  145.018068][T10773]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  145.018112][T10773]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  145.018129][T10773]  ? trace_kmalloc+0x1f/0xd0
[  145.018144][T10773]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  145.018161][T10773]  ? kstrndup+0xbf/0x160
[  145.018184][T10773]  hwsim_new_radio_nl+0xea4/0x1b10
[  145.018204][T10773]  ? __pfx___nla_validate_parse+0x10/0x10
[  145.018228][T10773]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.018255][T10773]  ? __nla_parse+0x40/0x60
[  145.018272][T10773]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  145.018293][T10773]  genl_family_rcv_msg_doit+0x215/0x300
[  145.018314][T10773]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.018336][T10773]  ? bpf_lsm_capable+0x9/0x20
[  145.018351][T10773]  ? security_capable+0x7e/0x2e0
[  145.018374][T10773]  genl_rcv_msg+0x60e/0x790
[  145.018396][T10773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.018412][T10773]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.018441][T10773]  netlink_rcv_skb+0x208/0x470
[  145.018454][T10773]  ? __lock_acquire+0xab9/0xd20
[  145.018474][T10773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.018492][T10773]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.018519][T10773]  ? down_read+0x1ad/0x2e0
[  145.018535][T10773]  genl_rcv+0x28/0x40
[  145.018552][T10773]  netlink_unicast+0x82f/0x9e0
[  145.018577][T10773]  ? __pfx_netlink_unicast+0x10/0x10
[  145.018597][T10773]  ? netlink_sendmsg+0x642/0xb30
[  145.018609][T10773]  ? skb_put+0x11b/0x210
[  145.018626][T10773]  netlink_sendmsg+0x805/0xb30
[  145.018644][T10773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.018660][T10773]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.018676][T10773]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.018690][T10773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.018704][T10773]  __sock_sendmsg+0x21c/0x270
[  145.018726][T10773]  ____sys_sendmsg+0x505/0x830
[  145.018774][T10773]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.018797][T10773]  ? import_iovec+0x74/0xa0
[  145.018815][T10773]  ___sys_sendmsg+0x21f/0x2a0
[  145.018833][T10773]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.018877][T10773]  ? __fget_files+0x2a/0x420
[  145.018891][T10773]  ? __fget_files+0x3a0/0x420
[  145.018908][T10773]  __x64_sys_sendmsg+0x19b/0x260
[  145.018925][T10773]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.018947][T10773]  ? rcu_is_watching+0x15/0xb0
[  145.018963][T10773]  ? do_syscall_64+0xbe/0x3b0
[  145.018981][T10773]  do_syscall_64+0xfa/0x3b0
[  145.018994][T10773]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.019007][T10773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.019021][T10773]  ? exc_page_fault+0x9f/0xf0
[  145.019036][T10773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.019049][T10773] RIP: 0033:0x7f6d05d8ec29
[  145.019062][T10773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.019080][T10773] RSP: 002b:00007f6d06bc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.019095][T10773] RAX: ffffffffffffffda RBX: 00007f6d05fd6090 RCX: 00007f6d05d8ec29
[  145.019105][T10773] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  145.019113][T10773] RBP: 00007f6d05e11e41 R08: 0000000000000000 R09: 0000000000000000
[  145.019121][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.019128][T10773] R13: 00007f6d05fd6128 R14: 00007f6d05fd6090 R15: 00007ffec4dd8c28
[  145.019150][T10773]  </TASK>
[  145.454335][T10790] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  145.459994][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.0.1044 Not tainted syzkaller #0 PREEMPT(full) 
[  145.460011][T10790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.460019][T10790] Call Trace:
[  145.460024][T10790]  <TASK>
[  145.460031][T10790]  dump_stack_lvl+0x189/0x250
[  145.460056][T10790]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.460072][T10790]  ? __pfx__printk+0x10/0x10
[  145.460094][T10790]  ? kernfs_path_from_node+0x2f/0x290
[  145.460115][T10790]  ? kernfs_path_from_node+0x250/0x290
[  145.460127][T10790]  ? kernfs_path_from_node+0x2f/0x290
[  145.460145][T10790]  sysfs_warn_dup+0x8e/0xa0
[  145.460160][T10790]  sysfs_do_create_link_sd+0xc0/0x110
[  145.460176][T10790]  device_add_class_symlinks+0x1cf/0x240
[  145.460196][T10790]  device_add+0x475/0xb50
[  145.460215][T10790]  wiphy_register+0x1ba6/0x28d0
[  145.460242][T10790]  ? __pfx_wiphy_register+0x10/0x10
[  145.460255][T10790]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  145.460277][T10790]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  145.460298][T10790]  ieee80211_register_hw+0x3484/0x4100
[  145.460325][T10790]  ? ieee80211_register_hw+0x13f1/0x4100
[  145.460349][T10790]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  145.460368][T10790]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.460394][T10790]  ? __hrtimer_setup+0x187/0x210
[  145.460405][T10790]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  145.460421][T10790]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  145.460461][T10790]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  145.460479][T10790]  ? trace_kmalloc+0x1f/0xd0
[  145.460494][T10790]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  145.460511][T10790]  ? kstrndup+0xbf/0x160
[  145.460531][T10790]  hwsim_new_radio_nl+0xea4/0x1b10
[  145.460551][T10790]  ? __pfx___nla_validate_parse+0x10/0x10
[  145.460576][T10790]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.460604][T10790]  ? __nla_parse+0x40/0x60
[  145.460620][T10790]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  145.460644][T10790]  genl_family_rcv_msg_doit+0x215/0x300
[  145.460668][T10790]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.460694][T10790]  ? bpf_lsm_capable+0x9/0x20
[  145.460710][T10790]  ? security_capable+0x7e/0x2e0
[  145.460761][T10790]  genl_rcv_msg+0x60e/0x790
[  145.460785][T10790]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.460801][T10790]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.460831][T10790]  netlink_rcv_skb+0x208/0x470
[  145.460843][T10790]  ? __lock_acquire+0xab9/0xd20
[  145.460860][T10790]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.460879][T10790]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.460906][T10790]  ? down_read+0x1ad/0x2e0
[  145.460923][T10790]  genl_rcv+0x28/0x40
[  145.460938][T10790]  netlink_unicast+0x82f/0x9e0
[  145.460965][T10790]  ? __pfx_netlink_unicast+0x10/0x10
[  145.460986][T10790]  ? netlink_sendmsg+0x642/0xb30
[  145.460999][T10790]  ? skb_put+0x11b/0x210
[  145.461015][T10790]  netlink_sendmsg+0x805/0xb30
[  145.461073][T10790]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.461090][T10790]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.461113][T10790]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.461127][T10790]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.461143][T10790]  __sock_sendmsg+0x21c/0x270
[  145.461164][T10790]  ____sys_sendmsg+0x505/0x830
[  145.461185][T10790]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.461209][T10790]  ? import_iovec+0x74/0xa0
[  145.461227][T10790]  ___sys_sendmsg+0x21f/0x2a0
[  145.461244][T10790]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.461288][T10790]  ? __fget_files+0x2a/0x420
[  145.461299][T10790]  ? __fget_files+0x3a0/0x420
[  145.461318][T10790]  __x64_sys_sendmsg+0x19b/0x260
[  145.461337][T10790]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.461360][T10790]  ? rcu_is_watching+0x15/0xb0
[  145.461377][T10790]  ? do_syscall_64+0xbe/0x3b0
[  145.461395][T10790]  do_syscall_64+0xfa/0x3b0
[  145.461406][T10790]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.461419][T10790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.461432][T10790]  ? exc_page_fault+0x9f/0xf0
[  145.461445][T10790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.461458][T10790] RIP: 0033:0x7f6d05d8ec29
[  145.461470][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.461481][T10790] RSP: 002b:00007f6d06bc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.461494][T10790] RAX: ffffffffffffffda RBX: 00007f6d05fd6090 RCX: 00007f6d05d8ec29
[  145.461503][T10790] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  145.461511][T10790] RBP: 00007f6d05e11e41 R08: 0000000000000000 R09: 0000000000000000
[  145.461519][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.461527][T10790] R13: 00007f6d05fd6128 R14: 00007f6d05fd6090 R15: 00007ffec4dd8c28
[  145.461550][T10790]  </TASK>
[  145.733567][T10792] IPVS: persistence engine module ip_vs_pe_ not found
[  146.037629][T10811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.040762][T10811] IPv6: NLM_F_CREATE should be set when creating new route
[  146.353690][T10840] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  146.358310][T10840] CPU: 1 UID: 0 PID: 10840 Comm: syz.0.1055 Not tainted syzkaller #0 PREEMPT(full) 
[  146.358328][T10840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.358335][T10840] Call Trace:
[  146.358341][T10840]  <TASK>
[  146.358347][T10840]  dump_stack_lvl+0x189/0x250
[  146.358371][T10840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.358387][T10840]  ? __pfx__printk+0x10/0x10
[  146.358408][T10840]  ? kernfs_path_from_node+0x2f/0x290
[  146.358423][T10840]  ? kernfs_path_from_node+0x250/0x290
[  146.358435][T10840]  ? kernfs_path_from_node+0x2f/0x290
[  146.358452][T10840]  sysfs_warn_dup+0x8e/0xa0
[  146.358465][T10840]  sysfs_do_create_link_sd+0xc0/0x110
[  146.358481][T10840]  device_add_class_symlinks+0x1cf/0x240
[  146.358500][T10840]  device_add+0x475/0xb50
[  146.358519][T10840]  wiphy_register+0x1ba6/0x28d0
[  146.358547][T10840]  ? __pfx_wiphy_register+0x10/0x10
[  146.358560][T10840]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  146.358584][T10840]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  146.358604][T10840]  ieee80211_register_hw+0x3484/0x4100
[  146.358634][T10840]  ? ieee80211_register_hw+0x13f1/0x4100
[  146.358660][T10840]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  146.358680][T10840]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.358704][T10840]  ? __hrtimer_setup+0x187/0x210
[  146.358717][T10840]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  146.358760][T10840]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  146.358802][T10840]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  146.358820][T10840]  ? trace_kmalloc+0x1f/0xd0
[  146.358843][T10840]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  146.358859][T10840]  ? kstrndup+0xbf/0x160
[  146.358881][T10840]  hwsim_new_radio_nl+0xea4/0x1b10
[  146.358901][T10840]  ? __pfx___nla_validate_parse+0x10/0x10
[  146.358926][T10840]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.358953][T10840]  ? __nla_parse+0x40/0x60
[  146.358968][T10840]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  146.358992][T10840]  genl_family_rcv_msg_doit+0x215/0x300
[  146.359015][T10840]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  146.359042][T10840]  ? bpf_lsm_capable+0x9/0x20
[  146.359059][T10840]  ? security_capable+0x7e/0x2e0
[  146.359081][T10840]  genl_rcv_msg+0x60e/0x790
[  146.359103][T10840]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.359118][T10840]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.359147][T10840]  netlink_rcv_skb+0x208/0x470
[  146.359158][T10840]  ? __lock_acquire+0xab9/0xd20
[  146.359176][T10840]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.359194][T10840]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  146.359222][T10840]  ? down_read+0x1ad/0x2e0
[  146.359241][T10840]  genl_rcv+0x28/0x40
[  146.359256][T10840]  netlink_unicast+0x82f/0x9e0
[  146.359283][T10840]  ? __pfx_netlink_unicast+0x10/0x10
[  146.359302][T10840]  ? netlink_sendmsg+0x642/0xb30
[  146.359313][T10840]  ? skb_put+0x11b/0x210
[  146.359330][T10840]  netlink_sendmsg+0x805/0xb30
[  146.359350][T10840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.359365][T10840]  ? aa_sock_msg_perm+0xf1/0x1d0
[  146.359379][T10840]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  146.359392][T10840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.359405][T10840]  __sock_sendmsg+0x21c/0x270
[  146.359426][T10840]  ____sys_sendmsg+0x505/0x830
[  146.359446][T10840]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.359469][T10840]  ? import_iovec+0x74/0xa0
[  146.359489][T10840]  ___sys_sendmsg+0x21f/0x2a0
[  146.359506][T10840]  ? __pfx____sys_sendmsg+0x10/0x10
[  146.359552][T10840]  ? __fget_files+0x2a/0x420
[  146.359562][T10840]  ? __fget_files+0x3a0/0x420
[  146.359581][T10840]  __x64_sys_sendmsg+0x19b/0x260
[  146.359600][T10840]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  146.359625][T10840]  ? rcu_is_watching+0x15/0xb0
[  146.359641][T10840]  ? do_syscall_64+0xbe/0x3b0
[  146.359660][T10840]  do_syscall_64+0xfa/0x3b0
[  146.359673][T10840]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.359686][T10840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.359699][T10840]  ? exc_page_fault+0x9f/0xf0
[  146.359714][T10840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.359756][T10840] RIP: 0033:0x7f6d05d8ec29
[  146.359770][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.359781][T10840] RSP: 002b:00007f6d06bc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.359796][T10840] RAX: ffffffffffffffda RBX: 00007f6d05fd6090 RCX: 00007f6d05d8ec29
[  146.359805][T10840] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  146.359813][T10840] RBP: 00007f6d05e11e41 R08: 0000000000000000 R09: 0000000000000000
[  146.359820][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.359833][T10840] R13: 00007f6d05fd6128 R14: 00007f6d05fd6090 R15: 00007ffec4dd8c28
[  146.359851][T10840]  </TASK>
[  146.686306][T10846] tun1: tun_chr_ioctl cmd 1074025675
[  146.688748][T10846] tun1: persist enabled
[  146.690796][T10846] tun1: tun_chr_ioctl cmd 1074025675
[  146.692743][T10846] tun1: persist enabled
[  146.700297][ T5858] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.704787][ T5858] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.710228][ T5858] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.715774][ T5858] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.813393][T10854] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  146.853106][T10853] IPVS: stopping backup sync thread 10854 ...
[  147.102883][T10836] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  147.230812][T10873] netlink: 'syz.2.1067': attribute type 4 has an invalid length.
[  147.234180][T10873] netlink: 'syz.2.1067': attribute type 4 has an invalid length.
[  147.248386][T10873] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  147.567669][T10892] __nla_validate_parse: 8 callbacks suppressed
[  147.567683][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'.
[  147.593203][T10892] netlink: 'syz.3.1073': attribute type 1 has an invalid length.
[  148.324736][T10926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1082'.
[  148.333743][T10926] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  148.361262][T10927] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  148.372084][T10934] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1085'.
[  148.414887][T10938] IPVS: stopping backup sync thread 10939 ...
[  148.421428][T10939] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  148.432477][T10938] tipc: Started in network mode
[  148.434774][T10938] tipc: Node identity 080211000001, cluster identity 8
[  148.442931][T10938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.446804][T10938] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  148.449869][T10941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.451852][T10938] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  148.464439][T10936] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  148.472988][T10936] CPU: 0 UID: 0 PID: 10936 Comm: syz.2.1087 Not tainted syzkaller #0 PREEMPT(full) 
[  148.473007][T10936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.473015][T10936] Call Trace:
[  148.473020][T10936]  <TASK>
[  148.473025][T10936]  dump_stack_lvl+0x189/0x250
[  148.473048][T10936]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.473062][T10936]  ? __pfx__printk+0x10/0x10
[  148.473083][T10936]  ? kernfs_path_from_node+0x2f/0x290
[  148.473098][T10936]  ? kernfs_path_from_node+0x250/0x290
[  148.473110][T10936]  ? kernfs_path_from_node+0x2f/0x290
[  148.473127][T10936]  sysfs_warn_dup+0x8e/0xa0
[  148.473142][T10936]  sysfs_do_create_link_sd+0xc0/0x110
[  148.473158][T10936]  device_add_class_symlinks+0x1cf/0x240
[  148.473177][T10936]  device_add+0x475/0xb50
[  148.473196][T10936]  wiphy_register+0x1ba6/0x28d0
[  148.473223][T10936]  ? __pfx_wiphy_register+0x10/0x10
[  148.473235][T10936]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  148.473259][T10936]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  148.473280][T10936]  ieee80211_register_hw+0x3484/0x4100
[  148.473308][T10936]  ? ieee80211_register_hw+0x13f1/0x4100
[  148.473334][T10936]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  148.473353][T10936]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.473379][T10936]  ? __hrtimer_setup+0x187/0x210
[  148.473391][T10936]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  148.473407][T10936]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  148.473446][T10936]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  148.473465][T10936]  ? trace_kmalloc+0x1f/0xd0
[  148.473481][T10936]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  148.473498][T10936]  ? kstrndup+0xbf/0x160
[  148.473521][T10936]  hwsim_new_radio_nl+0xea4/0x1b10
[  148.473542][T10936]  ? __pfx___nla_validate_parse+0x10/0x10
[  148.473567][T10936]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  148.473595][T10936]  ? __nla_parse+0x40/0x60
[  148.473612][T10936]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  148.473651][T10936]  genl_family_rcv_msg_doit+0x215/0x300
[  148.473675][T10936]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  148.473730][T10936]  ? bpf_lsm_capable+0x9/0x20
[  148.473750][T10936]  ? security_capable+0x7e/0x2e0
[  148.473784][T10936]  genl_rcv_msg+0x60e/0x790
[  148.473809][T10936]  ? __pfx_genl_rcv_msg+0x10/0x10
[  148.473826][T10936]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  148.473857][T10936]  netlink_rcv_skb+0x208/0x470
[  148.473870][T10936]  ? __lock_acquire+0xab9/0xd20
[  148.473891][T10936]  ? __pfx_genl_rcv_msg+0x10/0x10
[  148.473909][T10936]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  148.473938][T10936]  ? down_read+0x1ad/0x2e0
[  148.473956][T10936]  genl_rcv+0x28/0x40
[  148.473970][T10936]  netlink_unicast+0x82f/0x9e0
[  148.473997][T10936]  ? __pfx_netlink_unicast+0x10/0x10
[  148.474019][T10936]  ? netlink_sendmsg+0x642/0xb30
[  148.474031][T10936]  ? skb_put+0x11b/0x210
[  148.474050][T10936]  netlink_sendmsg+0x805/0xb30
[  148.474071][T10936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.474087][T10936]  ? aa_sock_msg_perm+0xf1/0x1d0
[  148.474102][T10936]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  148.474116][T10936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.474130][T10936]  __sock_sendmsg+0x21c/0x270
[  148.474151][T10936]  ____sys_sendmsg+0x505/0x830
[  148.474172][T10936]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.474195][T10936]  ? import_iovec+0x74/0xa0
[  148.474214][T10936]  ___sys_sendmsg+0x21f/0x2a0
[  148.474232][T10936]  ? __pfx____sys_sendmsg+0x10/0x10
[  148.474277][T10936]  ? __fget_files+0x2a/0x420
[  148.474289][T10936]  ? __fget_files+0x3a0/0x420
[  148.474308][T10936]  __x64_sys_sendmsg+0x19b/0x260
[  148.474327][T10936]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  148.474351][T10936]  ? rcu_is_watching+0x15/0xb0
[  148.474369][T10936]  ? do_syscall_64+0xbe/0x3b0
[  148.474387][T10936]  do_syscall_64+0xfa/0x3b0
[  148.474399][T10936]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.474411][T10936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.474424][T10936]  ? exc_page_fault+0x9f/0xf0
[  148.474439][T10936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.474451][T10936] RIP: 0033:0x7f7155d8ec29
[  148.474463][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.474475][T10936] RSP: 002b:00007f7156c64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.474488][T10936] RAX: ffffffffffffffda RBX: 00007f7155fd5fa0 RCX: 00007f7155d8ec29
[  148.474497][T10936] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  148.474505][T10936] RBP: 00007f7155e11e41 R08: 0000000000000000 R09: 0000000000000000
[  148.474513][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.474521][T10936] R13: 00007f7155fd6038 R14: 00007f7155fd5fa0 R15: 00007fff0ab88d78
[  148.474542][T10936]  </TASK>
[  148.669386][T10945] netlink: 'syz.3.1090': attribute type 74 has an invalid length.
[  148.743151][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'.
[  148.781583][T10954] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  148.915619][T10965] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  148.918879][T10965] CPU: 0 UID: 0 PID: 10965 Comm: syz.3.1098 Not tainted syzkaller #0 PREEMPT(full) 
[  148.918895][T10965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.918902][T10965] Call Trace:
[  148.918907][T10965]  <TASK>
[  148.918912][T10965]  dump_stack_lvl+0x189/0x250
[  148.918933][T10965]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.918949][T10965]  ? __pfx__printk+0x10/0x10
[  148.918971][T10965]  ? kernfs_path_from_node+0x2f/0x290
[  148.918985][T10965]  ? kernfs_path_from_node+0x250/0x290
[  148.918997][T10965]  ? kernfs_path_from_node+0x2f/0x290
[  148.919012][T10965]  sysfs_warn_dup+0x8e/0xa0
[  148.919025][T10965]  sysfs_do_create_link_sd+0xc0/0x110
[  148.919041][T10965]  device_add_class_symlinks+0x1cf/0x240
[  148.919062][T10965]  device_add+0x475/0xb50
[  148.919079][T10965]  wiphy_register+0x1ba6/0x28d0
[  148.919104][T10965]  ? __pfx_wiphy_register+0x10/0x10
[  148.919116][T10965]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  148.919137][T10965]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  148.919156][T10965]  ieee80211_register_hw+0x3484/0x4100
[  148.919186][T10965]  ? ieee80211_register_hw+0x13f1/0x4100
[  148.919209][T10965]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  148.919227][T10965]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.919250][T10965]  ? __hrtimer_setup+0x187/0x210
[  148.919260][T10965]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  148.919274][T10965]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  148.919311][T10965]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  148.919329][T10965]  ? trace_kmalloc+0x1f/0xd0
[  148.919344][T10965]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  148.919361][T10965]  ? kstrndup+0xbf/0x160
[  148.919382][T10965]  hwsim_new_radio_nl+0xea4/0x1b10
[  148.919404][T10965]  ? __pfx___nla_validate_parse+0x10/0x10
[  148.919427][T10965]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  148.919453][T10965]  ? __nla_parse+0x40/0x60
[  148.919467][T10965]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  148.919491][T10965]  genl_family_rcv_msg_doit+0x215/0x300
[  148.919514][T10965]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  148.919540][T10965]  ? bpf_lsm_capable+0x9/0x20
[  148.919558][T10965]  ? security_capable+0x7e/0x2e0
[  148.919585][T10965]  genl_rcv_msg+0x60e/0x790
[  148.919605][T10965]  ? __pfx_genl_rcv_msg+0x10/0x10
[  148.919619][T10965]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  148.919647][T10965]  netlink_rcv_skb+0x208/0x470
[  148.919659][T10965]  ? __lock_acquire+0xab9/0xd20
[  148.919679][T10965]  ? __pfx_genl_rcv_msg+0x10/0x10
[  148.919725][T10965]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  148.919755][T10965]  ? down_read+0x1ad/0x2e0
[  148.919777][T10965]  genl_rcv+0x28/0x40
[  148.919792][T10965]  netlink_unicast+0x82f/0x9e0
[  148.919817][T10965]  ? __pfx_netlink_unicast+0x10/0x10
[  148.919839][T10965]  ? netlink_sendmsg+0x642/0xb30
[  148.919850][T10965]  ? skb_put+0x11b/0x210
[  148.919868][T10965]  netlink_sendmsg+0x805/0xb30
[  148.919889][T10965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.919906][T10965]  ? aa_sock_msg_perm+0xf1/0x1d0
[  148.919921][T10965]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  148.919934][T10965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.919948][T10965]  __sock_sendmsg+0x21c/0x270
[  148.919970][T10965]  ____sys_sendmsg+0x505/0x830
[  148.919988][T10965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.920009][T10965]  ? import_iovec+0x74/0xa0
[  148.920026][T10965]  ___sys_sendmsg+0x21f/0x2a0
[  148.920042][T10965]  ? __pfx____sys_sendmsg+0x10/0x10
[  148.920082][T10965]  ? __fget_files+0x2a/0x420
[  148.920091][T10965]  ? __fget_files+0x3a0/0x420
[  148.920108][T10965]  __x64_sys_sendmsg+0x19b/0x260
[  148.920124][T10965]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  148.920148][T10965]  ? rcu_is_watching+0x15/0xb0
[  148.920166][T10965]  ? do_syscall_64+0xbe/0x3b0
[  148.920183][T10965]  do_syscall_64+0xfa/0x3b0
[  148.920194][T10965]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.920205][T10965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.920217][T10965]  ? exc_page_fault+0x9f/0xf0
[  148.920230][T10965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.920240][T10965] RIP: 0033:0x7fb140b8ec29
[  148.920251][T10965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.920261][T10965] RSP: 002b:00007fb141aed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.920274][T10965] RAX: ffffffffffffffda RBX: 00007fb140dd5fa0 RCX: 00007fb140b8ec29
[  148.920282][T10965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  148.920289][T10965] RBP: 00007fb140c11e41 R08: 0000000000000000 R09: 0000000000000000
[  148.920296][T10965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.920302][T10965] R13: 00007fb140dd6038 R14: 00007fb140dd5fa0 R15: 00007ffe674dbd68
[  148.920322][T10965]  </TASK>
[  149.255196][T10985] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  149.331914][T10994] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1105'.
[  149.505246][ T5876] tipc: Node number set to 134418688
[  149.592965][T11008] tap0: tun_chr_ioctl cmd 1074025677
[  149.594925][T11008] tap0: linktype set to 801
[  149.699180][T11019] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1110'.
[  150.018253][T11041] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1114'.
[  150.022362][T11041] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1114'.
[  150.059202][T11037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'.
[  150.261300][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1118'.
[  150.273763][T11056] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  150.277459][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.3.1119 Not tainted syzkaller #0 PREEMPT(full) 
[  150.277477][T11056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.277485][T11056] Call Trace:
[  150.277490][T11056]  <TASK>
[  150.277496][T11056]  dump_stack_lvl+0x189/0x250
[  150.277518][T11056]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.277533][T11056]  ? __pfx__printk+0x10/0x10
[  150.277554][T11056]  ? kernfs_path_from_node+0x2f/0x290
[  150.277569][T11056]  ? kernfs_path_from_node+0x250/0x290
[  150.277582][T11056]  ? kernfs_path_from_node+0x2f/0x290
[  150.277599][T11056]  sysfs_warn_dup+0x8e/0xa0
[  150.277613][T11056]  sysfs_do_create_link_sd+0xc0/0x110
[  150.277630][T11056]  device_add_class_symlinks+0x1cf/0x240
[  150.277651][T11056]  device_add+0x475/0xb50
[  150.277670][T11056]  wiphy_register+0x1ba6/0x28d0
[  150.277728][T11056]  ? __pfx_wiphy_register+0x10/0x10
[  150.277741][T11056]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  150.277763][T11056]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  150.277782][T11056]  ieee80211_register_hw+0x3484/0x4100
[  150.277810][T11056]  ? ieee80211_register_hw+0x13f1/0x4100
[  150.277835][T11056]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  150.277855][T11056]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.277881][T11056]  ? __hrtimer_setup+0x187/0x210
[  150.277893][T11056]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  150.277910][T11056]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  150.277952][T11056]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  150.277969][T11056]  ? trace_kmalloc+0x1f/0xd0
[  150.277984][T11056]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  150.278002][T11056]  ? kstrndup+0xbf/0x160
[  150.278023][T11056]  hwsim_new_radio_nl+0xea4/0x1b10
[  150.278051][T11056]  ? __pfx___nla_validate_parse+0x10/0x10
[  150.278077][T11056]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.278106][T11056]  ? __nla_parse+0x40/0x60
[  150.278123][T11056]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  150.278147][T11056]  genl_family_rcv_msg_doit+0x215/0x300
[  150.278169][T11056]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  150.278196][T11056]  ? bpf_lsm_capable+0x9/0x20
[  150.278213][T11056]  ? security_capable+0x7e/0x2e0
[  150.278239][T11056]  genl_rcv_msg+0x60e/0x790
[  150.278262][T11056]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.278278][T11056]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.278307][T11056]  netlink_rcv_skb+0x208/0x470
[  150.278319][T11056]  ? __lock_acquire+0xab9/0xd20
[  150.278339][T11056]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.278357][T11056]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.278386][T11056]  ? down_read+0x1ad/0x2e0
[  150.278403][T11056]  genl_rcv+0x28/0x40
[  150.278419][T11056]  netlink_unicast+0x82f/0x9e0
[  150.278447][T11056]  ? __pfx_netlink_unicast+0x10/0x10
[  150.278468][T11056]  ? netlink_sendmsg+0x642/0xb30
[  150.278480][T11056]  ? skb_put+0x11b/0x210
[  150.278498][T11056]  netlink_sendmsg+0x805/0xb30
[  150.278519][T11056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.278534][T11056]  ? aa_sock_msg_perm+0xf1/0x1d0
[  150.278548][T11056]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.278561][T11056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.278575][T11056]  __sock_sendmsg+0x21c/0x270
[  150.278595][T11056]  ____sys_sendmsg+0x505/0x830
[  150.278615][T11056]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.278638][T11056]  ? import_iovec+0x74/0xa0
[  150.278657][T11056]  ___sys_sendmsg+0x21f/0x2a0
[  150.278675][T11056]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.278749][T11056]  ? __fget_files+0x2a/0x420
[  150.278760][T11056]  ? __fget_files+0x3a0/0x420
[  150.278779][T11056]  __x64_sys_sendmsg+0x19b/0x260
[  150.278796][T11056]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.278819][T11056]  ? rcu_is_watching+0x15/0xb0
[  150.278836][T11056]  ? do_syscall_64+0xbe/0x3b0
[  150.278854][T11056]  do_syscall_64+0xfa/0x3b0
[  150.278866][T11056]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.278878][T11056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.278890][T11056]  ? exc_page_fault+0x9f/0xf0
[  150.278903][T11056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.278915][T11056] RIP: 0033:0x7fb140b8ec29
[  150.278927][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.278938][T11056] RSP: 002b:00007fb141aed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.278953][T11056] RAX: ffffffffffffffda RBX: 00007fb140dd5fa0 RCX: 00007fb140b8ec29
[  150.278962][T11056] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  150.278971][T11056] RBP: 00007fb140c11e41 R08: 0000000000000000 R09: 0000000000000000
[  150.278979][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.278987][T11056] R13: 00007fb140dd6038 R14: 00007fb140dd5fa0 R15: 00007ffe674dbd68
[  150.279010][T11056]  </TASK>
[  150.889627][T11090] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  150.892664][T11090] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  150.897479][T11090] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  151.530066][T11097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.233090][T11127] Bluetooth: MGMT ver 1.23
[  152.522464][T11132] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  152.526192][T11131] IPVS: stopping backup sync thread 11132 ...
[  152.578914][T11134] IPVS: Scheduler module ip_vs_sip not found
[  152.616901][T11137] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  153.075202][T11159] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  153.538077][T11184] __nla_validate_parse: 4 callbacks suppressed
[  153.538092][T11184] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1156'.
[  153.546919][T11184] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1156'.
[  153.620375][T11188] sctp: [Deprecated]: syz.3.1157 (pid 11188) Use of int in max_burst socket option deprecated.
[  153.620375][T11188] Use struct sctp_assoc_value instead
[  153.851467][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'.
[  154.069080][T11202] !: renamed from dummy0 (while UP)
[  154.440624][T11236] IPVS: persistence engine module ip_vs_pe_ not found
[  154.511836][T11245] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  154.514850][T11245] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  155.440848][T11293] netlink: 'syz.3.1170': attribute type 1 has an invalid length.
[  155.444087][T11293] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1170'.
[  155.969348][T11297] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  155.981174][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1171'.
[  155.984545][T11297] netlink: 'syz.0.1171': attribute type 3 has an invalid length.
[  156.494924][T11333] IPVS: stopping backup sync thread 11159 ...
[  156.531504][T11336] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.531633][T11335] IPVS: stopping backup sync thread 11336 ...
[  156.542030][T11335] netlink: 'syz.3.1183': attribute type 1 has an invalid length.
[  156.604675][T11340] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  156.609299][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.3.1185 Not tainted syzkaller #0 PREEMPT(full) 
[  156.609315][T11340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.609322][T11340] Call Trace:
[  156.609328][T11340]  <TASK>
[  156.609334][T11340]  dump_stack_lvl+0x189/0x250
[  156.609357][T11340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.609370][T11340]  ? __pfx__printk+0x10/0x10
[  156.609390][T11340]  ? kernfs_path_from_node+0x2f/0x290
[  156.609404][T11340]  ? kernfs_path_from_node+0x250/0x290
[  156.609415][T11340]  ? kernfs_path_from_node+0x2f/0x290
[  156.609429][T11340]  sysfs_warn_dup+0x8e/0xa0
[  156.609444][T11340]  sysfs_do_create_link_sd+0xc0/0x110
[  156.609459][T11340]  device_add_class_symlinks+0x1cf/0x240
[  156.609474][T11340]  device_add+0x475/0xb50
[  156.609484][T11340]  wiphy_register+0x1ba6/0x28d0
[  156.609500][T11340]  ? __pfx_wiphy_register+0x10/0x10
[  156.609507][T11340]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  156.609521][T11340]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  156.609533][T11340]  ieee80211_register_hw+0x3484/0x4100
[  156.609550][T11340]  ? ieee80211_register_hw+0x13f1/0x4100
[  156.609564][T11340]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  156.609581][T11340]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  156.609596][T11340]  ? __hrtimer_setup+0x187/0x210
[  156.609628][T11340]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  156.609637][T11340]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  156.609661][T11340]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  156.609673][T11340]  ? trace_kmalloc+0x1f/0xd0
[  156.609682][T11340]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  156.609693][T11340]  ? kstrndup+0xbf/0x160
[  156.609706][T11340]  hwsim_new_radio_nl+0xea4/0x1b10
[  156.609718][T11340]  ? __pfx___nla_validate_parse+0x10/0x10
[  156.609756][T11340]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.609773][T11340]  ? __nla_parse+0x40/0x60
[  156.609783][T11340]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  156.609798][T11340]  genl_family_rcv_msg_doit+0x215/0x300
[  156.609812][T11340]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.609828][T11340]  ? bpf_lsm_capable+0x9/0x20
[  156.609840][T11340]  ? security_capable+0x7e/0x2e0
[  156.609854][T11340]  genl_rcv_msg+0x60e/0x790
[  156.609867][T11340]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.609877][T11340]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.609894][T11340]  netlink_rcv_skb+0x208/0x470
[  156.609901][T11340]  ? __lock_acquire+0xab9/0xd20
[  156.609912][T11340]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.609923][T11340]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.609938][T11340]  ? down_read+0x1ad/0x2e0
[  156.609948][T11340]  genl_rcv+0x28/0x40
[  156.609957][T11340]  netlink_unicast+0x82f/0x9e0
[  156.609973][T11340]  ? __pfx_netlink_unicast+0x10/0x10
[  156.609985][T11340]  ? netlink_sendmsg+0x642/0xb30
[  156.609992][T11340]  ? skb_put+0x11b/0x210
[  156.610002][T11340]  netlink_sendmsg+0x805/0xb30
[  156.610015][T11340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.610024][T11340]  ? aa_sock_msg_perm+0xf1/0x1d0
[  156.610033][T11340]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.610041][T11340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.610050][T11340]  __sock_sendmsg+0x21c/0x270
[  156.610062][T11340]  ____sys_sendmsg+0x505/0x830
[  156.610074][T11340]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.610087][T11340]  ? import_iovec+0x74/0xa0
[  156.610098][T11340]  ___sys_sendmsg+0x21f/0x2a0
[  156.610109][T11340]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.610133][T11340]  ? __fget_files+0x2a/0x420
[  156.610140][T11340]  ? __fget_files+0x3a0/0x420
[  156.610151][T11340]  __x64_sys_sendmsg+0x19b/0x260
[  156.610162][T11340]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.610176][T11340]  ? rcu_is_watching+0x15/0xb0
[  156.610186][T11340]  ? do_syscall_64+0xbe/0x3b0
[  156.610196][T11340]  do_syscall_64+0xfa/0x3b0
[  156.610203][T11340]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.610211][T11340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.610218][T11340]  ? exc_page_fault+0x9f/0xf0
[  156.610226][T11340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.610234][T11340] RIP: 0033:0x7fb140b8ec29
[  156.610242][T11340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.610248][T11340] RSP: 002b:00007fb141aed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.610257][T11340] RAX: ffffffffffffffda RBX: 00007fb140dd5fa0 RCX: 00007fb140b8ec29
[  156.610263][T11340] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  156.610267][T11340] RBP: 00007fb140c11e41 R08: 0000000000000000 R09: 0000000000000000
[  156.610272][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.610276][T11340] R13: 00007fb140dd6038 R14: 00007fb140dd5fa0 R15: 00007ffe674dbd68
[  156.610288][T11340]  </TASK>
[  156.905522][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'.
[  156.985139][T11355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1190'.
[  156.988935][T11355] netlink: 'syz.3.1190': attribute type 3 has an invalid length.
[  157.086499][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'.
[  157.089701][T11367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1193'.
[  157.100541][T11367] tun0: tun_chr_ioctl cmd 1074025675
[  157.102300][T11367] tun0: persist enabled
[  157.103924][T11367] tun0: tun_chr_ioctl cmd 1074025675
[  157.106426][T11367] tun0: persist enabled
[  157.108199][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1193'.
[  157.553613][T11380] nbd: must specify a size in bytes for the device
[  157.600834][T11384] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  157.600861][T11382] IPVS: stopping backup sync thread 11384 ...
[  158.465233][T11406] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.777278][T11425] netlink: 'syz.2.1210': attribute type 1 has an invalid length.
[  158.780549][T11425] __nla_validate_parse: 2 callbacks suppressed
[  158.780557][T11425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1210'.
[  159.307049][T11436] IPVS: persistence engine module ip_vs_pe_ not found
[  159.340403][T11439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.530124][T11450] IPVS: Scheduler module ip_vs_sip not found
[  159.697208][T11463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1224'.
[  159.844626][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1227'.
[  159.913008][T11485] netlink: 'syz.3.1231': attribute type 29 has an invalid length.
[  159.927374][T11485] netlink: 'syz.3.1231': attribute type 29 has an invalid length.
[  159.932192][T11485] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1231'.
[  159.975386][T11492] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  160.024645][T11497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1235'.
[  160.121930][T11504] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1238'.
[  160.273934][T11514] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1240'.
[  160.778951][T11543] IPVS: stopping backup sync thread 11545 ...
[  160.779997][T11545] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  161.170904][T11564] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  161.175742][T11563] IPVS: stopping backup sync thread 11564 ...
[  161.344338][T11575] nbd: must specify at least one socket
[  161.431171][T11583] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  161.435869][T11582] IPVS: stopping backup sync thread 11583 ...
[  161.513946][T11588] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  161.520335][T11587] IPVS: stopping backup sync thread 11588 ...
[  161.873956][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1267'.
[  161.880132][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'.
[  162.627941][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'.
[  162.808572][T11637] netlink: 'syz.0.1276': attribute type 4 has an invalid length.
[  162.827012][T11639] netlink: 'syz.2.1278': attribute type 3 has an invalid length.
[  163.759683][T11662] netlink: 'syz.2.1285': attribute type 3 has an invalid length.
[  164.769445][T11680] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  164.777487][T11680] CPU: 0 UID: 0 PID: 11680 Comm: syz.2.1289 Not tainted syzkaller #0 PREEMPT(full) 
[  164.777530][T11680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.777538][T11680] Call Trace:
[  164.777543][T11680]  <TASK>
[  164.777548][T11680]  dump_stack_lvl+0x189/0x250
[  164.777569][T11680]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.777583][T11680]  ? __pfx__printk+0x10/0x10
[  164.777603][T11680]  ? kernfs_path_from_node+0x2f/0x290
[  164.777616][T11680]  ? kernfs_path_from_node+0x250/0x290
[  164.777627][T11680]  ? kernfs_path_from_node+0x2f/0x290
[  164.777643][T11680]  sysfs_warn_dup+0x8e/0xa0
[  164.777655][T11680]  sysfs_do_create_link_sd+0xc0/0x110
[  164.777670][T11680]  device_add_class_symlinks+0x1cf/0x240
[  164.777689][T11680]  device_add+0x475/0xb50
[  164.777706][T11680]  wiphy_register+0x1ba6/0x28d0
[  164.777730][T11680]  ? __pfx_wiphy_register+0x10/0x10
[  164.777741][T11680]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  164.777762][T11680]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  164.777781][T11680]  ieee80211_register_hw+0x3484/0x4100
[  164.777807][T11680]  ? ieee80211_register_hw+0x13f1/0x4100
[  164.777830][T11680]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  164.777853][T11680]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.777877][T11680]  ? __hrtimer_setup+0x187/0x210
[  164.777887][T11680]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  164.777901][T11680]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  164.777942][T11680]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  164.777958][T11680]  ? trace_kmalloc+0x1f/0xd0
[  164.777971][T11680]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  164.777986][T11680]  ? kstrndup+0xbf/0x160
[  164.778007][T11680]  hwsim_new_radio_nl+0xea4/0x1b10
[  164.778026][T11680]  ? __pfx___nla_validate_parse+0x10/0x10
[  164.778050][T11680]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  164.778075][T11680]  ? __nla_parse+0x40/0x60
[  164.778090][T11680]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  164.778112][T11680]  genl_family_rcv_msg_doit+0x215/0x300
[  164.778133][T11680]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  164.778158][T11680]  ? bpf_lsm_capable+0x9/0x20
[  164.778172][T11680]  ? security_capable+0x7e/0x2e0
[  164.778194][T11680]  genl_rcv_msg+0x60e/0x790
[  164.778215][T11680]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.778230][T11680]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  164.778258][T11680]  netlink_rcv_skb+0x208/0x470
[  164.778268][T11680]  ? __lock_acquire+0xab9/0xd20
[  164.778285][T11680]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.778301][T11680]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.778347][T11680]  ? down_read+0x1ad/0x2e0
[  164.778362][T11680]  genl_rcv+0x28/0x40
[  164.778375][T11680]  netlink_unicast+0x82f/0x9e0
[  164.778400][T11680]  ? __pfx_netlink_unicast+0x10/0x10
[  164.778418][T11680]  ? netlink_sendmsg+0x642/0xb30
[  164.778429][T11680]  ? skb_put+0x11b/0x210
[  164.778445][T11680]  netlink_sendmsg+0x805/0xb30
[  164.778465][T11680]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.778480][T11680]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.778493][T11680]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.778531][T11680]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.778546][T11680]  __sock_sendmsg+0x21c/0x270
[  164.778567][T11680]  ____sys_sendmsg+0x505/0x830
[  164.778586][T11680]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.778608][T11680]  ? import_iovec+0x74/0xa0
[  164.778626][T11680]  ___sys_sendmsg+0x21f/0x2a0
[  164.778642][T11680]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.778684][T11680]  ? __fget_files+0x2a/0x420
[  164.778693][T11680]  ? __fget_files+0x3a0/0x420
[  164.778711][T11680]  __x64_sys_sendmsg+0x19b/0x260
[  164.778727][T11680]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.778755][T11680]  ? do_syscall_64+0xbe/0x3b0
[  164.778770][T11680]  do_syscall_64+0xfa/0x3b0
[  164.778783][T11680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.778794][T11680]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.778809][T11680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.778820][T11680] RIP: 0033:0x7f7155d8ec29
[  164.778830][T11680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.778845][T11680] RSP: 002b:00007f7156c43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.778857][T11680] RAX: ffffffffffffffda RBX: 00007f7155fd6090 RCX: 00007f7155d8ec29
[  164.778865][T11680] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  164.778871][T11680] RBP: 00007f7155e11e41 R08: 0000000000000000 R09: 0000000000000000
[  164.778878][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.778884][T11680] R13: 00007f7155fd6128 R14: 00007f7155fd6090 R15: 00007fff0ab88d78
[  164.778905][T11680]  </TASK>
[  164.854679][T11686] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  164.911235][T11687] __nla_validate_parse: 4 callbacks suppressed
[  164.911250][T11687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'.
[  165.606227][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'.
[  165.609599][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'.
[  165.838392][T11706] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  165.844376][T11706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1297'.
[  165.848644][T11706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1297'.
[  166.474092][T11723] IPVS: persistence engine module ip_vs_pe_ not found
[  166.519454][T11726] syzkaller1: entered promiscuous mode
[  166.522037][T11726] syzkaller1: entered allmulticast mode
[  166.529044][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'.
[  166.624588][T11733] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1305'.
[  166.685645][T11739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1305'.
[  167.078858][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'.
[  167.079151][T11775] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1317'.
[  167.494780][T11796] IPVS: fo: TCP 172.20.20.170:0 - no destination available
[  168.234121][T11839] atomic_op ffff888125d97998 conn xmit_atomic 0000000000000000
[  168.818079][T11875] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  168.821709][T11875] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  169.426560][T11885] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  169.429978][T11885] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  169.540169][T11890] mac80211_hwsim hwsim38 syzkaller0: Caught tx_queue_len zero misconfig
[  169.544874][T11890] policy can only be matched on NF_INET_PRE_ROUTING
[  169.544889][T11890] unable to load match
[  169.692085][T11894] IPVS: persistence engine module ip_vs_pe_ not found
[  170.043131][T11914] !: renamed from dummy0 (while UP)
[  170.744635][T11948] __nla_validate_parse: 2 callbacks suppressed
[  170.744650][T11948] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1352'.
[  170.971010][T11957] batadv0: entered promiscuous mode
[  170.973816][T11957] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.992654][T11957] batadv0: left promiscuous mode
[  171.040705][T11970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'.
[  171.094326][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  171.473267][T12012] netlink: 'syz.3.1370': attribute type 13 has an invalid length.
[  171.577765][T12024] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  171.631796][T12022] mac80211_hwsim hwsim36 wlan0: left promiscuous mode
[  171.638173][T12022] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode
[  171.641051][T12022] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode
[  171.752914][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'.
[  171.764725][ T5875] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.768103][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'.
[  171.771210][ T5875] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.774944][ T5875] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.778340][ T5875] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.871587][T12042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.416784][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'.
[  172.781957][T12072] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1389'.
[  172.862681][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'.
[  172.867793][T12078] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  172.871257][T12078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.800909][T12147] netlink: 'syz.2.1403': attribute type 4 has an invalid length.
[  173.804747][T12147] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1403'.
[  174.453292][T12163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'.
[  175.310114][T12168] netlink: 'syz.0.1410': attribute type 9 has an invalid length.
[  176.218320][T12179] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  176.221318][T12179] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  176.662550][T12190] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  176.817226][T12200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.344549][T12228] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  177.348461][T12227] IPVS: stopping backup sync thread 12228 ...
[  177.659495][T12237] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  177.664178][T12235] IPVS: stopping backup sync thread 12237 ...
[  177.993864][T12257] __nla_validate_parse: 6 callbacks suppressed
[  177.993880][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'.
[  178.053943][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'.
[  178.058500][T12259] tun1: tun_chr_ioctl cmd 1074025675
[  178.060695][T12259] tun1: persist enabled
[  178.062698][T12259] tun1: tun_chr_ioctl cmd 1074025675
[  178.064832][T12259] tun1: persist enabled
[  178.305942][T12274] IPVS: set_ctl: invalid protocol: 164 127.0.0.1:20001
[  178.665943][ T5910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.723754][ T5910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.796855][ T5910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.852422][ T5910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.007294][ T5910] bridge_slave_1: left allmulticast mode
[  179.009740][ T5910] bridge_slave_1: left promiscuous mode
[  179.013511][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.032692][ T5910] bridge_slave_0: left allmulticast mode
[  179.037384][ T5910] bridge_slave_0: left promiscuous mode
[  179.039674][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.078832][T12319] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1443'.
[  179.182968][T12320] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1443'.
[  179.691416][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.697214][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.701202][ T5910] bond0 (unregistering): Released all slaves
[  179.723813][T12331] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  179.785663][ T5910] tipc: Disabling bearer <eth:team0>
[  179.794904][ T5910] tipc: Left network mode
[  180.055903][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'.
[  180.069154][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'.
[  180.111002][ T5910] hsr_slave_0: left promiscuous mode
[  180.115235][ T5910] hsr_slave_1: left promiscuous mode
[  180.117504][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.124702][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.129640][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.132203][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.146305][ T5910] veth1_macvtap: left promiscuous mode
[  180.148648][ T5910] veth0_macvtap: left promiscuous mode
[  180.150672][ T5910] veth1_vlan: left promiscuous mode
[  180.152576][ T5910] veth0_vlan: left promiscuous mode
[  180.230810][T12369] netlink: 'syz.0.1451': attribute type 4 has an invalid length.
[  180.426547][ T5910] team0 (unregistering): Port device team_slave_1 removed
[  180.452677][ T5910] team0 (unregistering): Port device team_slave_0 removed
[  180.838463][T12379] IPVS: stopping backup sync thread 12331 ...
[  181.019074][ T5910] IPVS: stop unused estimator thread 0...
[  181.080152][T12392] netlink: 'syz.3.1456': attribute type 1 has an invalid length.
[  181.109257][T12392] 8021q: adding VLAN 0 to HW filter on device bond2
[  181.142748][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1456'.
[  181.499781][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1457'.
[  181.660608][T12417] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1459'.
[  182.204019][T12443] netlink: 'syz.3.1465': attribute type 1 has an invalid length.
[  182.206732][T12443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1465'.
[  182.556166][T12464] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  182.560792][T12463] IPVS: stopping backup sync thread 12464 ...
[  182.752241][T12474] IPVS: persistence engine module ip_vs_pe_ not found
[  182.920269][T12486] netlink: 'syz.0.1478': attribute type 11 has an invalid length.
[  183.208227][T12508] __nla_validate_parse: 5 callbacks suppressed
[  183.208238][T12508] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1485'.
[  183.267672][T12513] IPVS: stopping backup sync thread 12024 ...
[  183.272391][T12513] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1486'.
[  183.276625][T12513] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1486'.
[  183.326296][T12514] block nbd1: server does not support multiple connections per device.
[  183.329781][T12514] block nbd1: shutting down sockets
[  183.438001][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'.
[  183.691013][T12574] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1499'.
[  183.843874][T12591] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  183.861365][T12591] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  183.871755][T12593] IPVS: length: 30 != 8
[  184.083182][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1509'.
[  184.102016][T12602] tap0: tun_chr_ioctl cmd 1074025676
[  184.104086][T12602] tap0: owner set to 0
[  184.108779][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'.
[  184.706217][T12605] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component
[  185.063927][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'.
[  185.086453][T12646] tun2: tun_chr_ioctl cmd 1074025672
[  185.088703][T12646] tun2: ignored: set checksum disabled
[  185.354808][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'.
[  185.835908][T12680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.839911][T12680] syzkaller0: entered promiscuous mode
[  185.842154][T12680] syzkaller0: entered allmulticast mode
[  185.848995][T12680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'.
[  185.864572][T12680] tipc: Resetting bearer <eth:syzkaller0>
[  185.881947][T12680] tipc: Resetting bearer <eth:syzkaller0>
[  185.891700][T12680] tipc: Disabling bearer <eth:syzkaller0>
[  185.995451][T12687] netlink: zone id is out of range
[  185.998481][T12687] netlink: zone id is out of range
[  186.001056][T12687] netlink: zone id is out of range
[  186.003006][T12687] netlink: zone id is out of range
[  186.038756][T12687] netlink: set zone limit has 4 unknown bytes
[  186.058300][T12687] netlink: del zone limit has 4 unknown bytes
[  186.067763][T12687] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  186.070839][T12687] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  186.970844][T12704] IPVS: Scheduler module ip_vs_sip not found
[  187.022048][T12708] netlink: 'syz.0.1541': attribute type 6 has an invalid length.
[  187.024939][T12708] netlink: 'syz.0.1541': attribute type 4 has an invalid length.
[  187.736830][T12747] netlink: 'syz.2.1552': attribute type 83 has an invalid length.
[  188.930204][T12770] __nla_validate_parse: 8 callbacks suppressed
[  188.930245][T12770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1559'.
[  188.939890][T12770] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  189.003597][T12781] netlink: 'syz.3.1563': attribute type 4 has an invalid length.
[  189.081279][T12786] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  189.084757][T12786] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  189.091185][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'.
[  189.604460][T12797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1568'.
[  189.609608][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  189.719569][T12803] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  189.719657][T12802] IPVS: stopping backup sync thread 12803 ...
[  189.942365][T12809] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  189.945268][T12808] IPVS: stopping backup sync thread 12809 ...
[  190.023989][T12816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1574'.
[  190.053003][T12817] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  190.058246][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.0.1573 Not tainted syzkaller #0 PREEMPT(full) 
[  190.058264][T12817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.058272][T12817] Call Trace:
[  190.058277][T12817]  <TASK>
[  190.058284][T12817]  dump_stack_lvl+0x189/0x250
[  190.058307][T12817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.058331][T12817]  ? __pfx__printk+0x10/0x10
[  190.058353][T12817]  ? kernfs_path_from_node+0x2f/0x290
[  190.058367][T12817]  ? kernfs_path_from_node+0x250/0x290
[  190.058379][T12817]  ? kernfs_path_from_node+0x2f/0x290
[  190.058396][T12817]  sysfs_warn_dup+0x8e/0xa0
[  190.058409][T12817]  sysfs_do_create_link_sd+0xc0/0x110
[  190.058424][T12817]  device_add_class_symlinks+0x1cf/0x240
[  190.058442][T12817]  device_add+0x475/0xb50
[  190.058461][T12817]  wiphy_register+0x1ba6/0x28d0
[  190.058487][T12817]  ? __pfx_wiphy_register+0x10/0x10
[  190.058499][T12817]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  190.058522][T12817]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  190.058544][T12817]  ieee80211_register_hw+0x3484/0x4100
[  190.058571][T12817]  ? ieee80211_register_hw+0x13f1/0x4100
[  190.058596][T12817]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  190.058617][T12817]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.058642][T12817]  ? __hrtimer_setup+0x187/0x210
[  190.058652][T12817]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  190.058667][T12817]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  190.058708][T12817]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  190.058724][T12817]  ? trace_kmalloc+0x1f/0xd0
[  190.058739][T12817]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  190.058756][T12817]  ? kstrndup+0xbf/0x160
[  190.058777][T12817]  hwsim_new_radio_nl+0xea4/0x1b10
[  190.058796][T12817]  ? __pfx___nla_validate_parse+0x10/0x10
[  190.058821][T12817]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.058849][T12817]  ? __nla_parse+0x40/0x60
[  190.058866][T12817]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  190.058891][T12817]  genl_family_rcv_msg_doit+0x215/0x300
[  190.058914][T12817]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  190.058942][T12817]  ? bpf_lsm_capable+0x9/0x20
[  190.058959][T12817]  ? security_capable+0x7e/0x2e0
[  190.058983][T12817]  genl_rcv_msg+0x60e/0x790
[  190.059005][T12817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.059020][T12817]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.059049][T12817]  netlink_rcv_skb+0x208/0x470
[  190.059061][T12817]  ? __lock_acquire+0xab9/0xd20
[  190.059080][T12817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.059098][T12817]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  190.059152][T12817]  ? down_read+0x1ad/0x2e0
[  190.059172][T12817]  genl_rcv+0x28/0x40
[  190.059189][T12817]  netlink_unicast+0x82f/0x9e0
[  190.059241][T12817]  ? __pfx_netlink_unicast+0x10/0x10
[  190.059262][T12817]  ? netlink_sendmsg+0x642/0xb30
[  190.059274][T12817]  ? skb_put+0x11b/0x210
[  190.059291][T12817]  netlink_sendmsg+0x805/0xb30
[  190.059318][T12817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.059334][T12817]  ? aa_sock_msg_perm+0xf1/0x1d0
[  190.059349][T12817]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.059363][T12817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.059378][T12817]  __sock_sendmsg+0x21c/0x270
[  190.059400][T12817]  ____sys_sendmsg+0x505/0x830
[  190.059420][T12817]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.059443][T12817]  ? import_iovec+0x74/0xa0
[  190.059463][T12817]  ___sys_sendmsg+0x21f/0x2a0
[  190.059480][T12817]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.059523][T12817]  ? __fget_files+0x2a/0x420
[  190.059533][T12817]  ? __fget_files+0x3a0/0x420
[  190.059552][T12817]  __x64_sys_sendmsg+0x19b/0x260
[  190.059569][T12817]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.059593][T12817]  ? rcu_is_watching+0x15/0xb0
[  190.059614][T12817]  ? do_syscall_64+0xbe/0x3b0
[  190.059631][T12817]  do_syscall_64+0xfa/0x3b0
[  190.059643][T12817]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.059655][T12817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.059667][T12817]  ? exc_page_fault+0x9f/0xf0
[  190.059682][T12817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.059693][T12817] RIP: 0033:0x7f6d05d8ec29
[  190.059705][T12817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.059716][T12817] RSP: 002b:00007f6d06bc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.059730][T12817] RAX: ffffffffffffffda RBX: 00007f6d05fd6090 RCX: 00007f6d05d8ec29
[  190.059739][T12817] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  190.059746][T12817] RBP: 00007f6d05e11e41 R08: 0000000000000000 R09: 0000000000000000
[  190.059754][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.059761][T12817] R13: 00007f6d05fd6128 R14: 00007f6d05fd6090 R15: 00007ffec4dd8c28
[  190.059783][T12817]  </TASK>
[  190.453568][T12823] team0: entered promiscuous mode
[  190.456361][T12823] team_slave_0: entered promiscuous mode
[  190.459614][T12823] team_slave_1: entered promiscuous mode
[  190.649513][T12828] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  190.870563][T12848] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  190.874382][T12847] IPVS: stopping backup sync thread 12848 ...
[  190.881360][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'.
[  190.919627][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'.
[  190.923249][T12852] team_slave_0: left promiscuous mode
[  190.927854][T12852] team_slave_1: left promiscuous mode
[  191.041141][T12852] team0 (unregistering): Port device team_slave_0 removed
[  191.050281][T12852] team0 (unregistering): Port device team_slave_1 removed
[  194.184628][T12892] netlink: 'syz.3.1591': attribute type 1 has an invalid length.
[  194.195021][T12892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1591'.
[  194.215682][T12895] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  194.219125][T12895] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  194.332572][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'.
[  194.449965][T12924] netlink: 'syz.2.1599': attribute type 4 has an invalid length.
[  194.459358][T12924] netlink: 'syz.2.1599': attribute type 4 has an invalid length.
[  194.515404][T12930] netlink: 'syz.0.1597': attribute type 21 has an invalid length.
[  194.525793][T12930] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1597'.
[  194.542904][T12922] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  194.621556][T12940] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1602'.
[  194.662518][T12940] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1602'.
[  195.181765][T12967] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  195.181812][T12966] IPVS: stopping backup sync thread 12967 ...
[  195.233078][T12970] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  195.237992][T12969] IPVS: stopping backup sync thread 12970 ...
[  195.539859][T12976] 
[  195.540967][T12976] ======================================================
[  195.543887][T12976] WARNING: possible circular locking dependency detected
[  195.546851][T12976] syzkaller #0 Not tainted
[  195.548672][T12976] ------------------------------------------------------
[  195.551913][T12976] syz.3.1609/12976 is trying to acquire lock:
[  195.554204][T12976] ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720
[  195.557420][T12976] 
[  195.557420][T12976] but task is already holding lock:
[  195.559952][T12976] ffff8880208e80a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  195.563536][T12976] 
[  195.563536][T12976] which lock already depends on the new lock.
[  195.563536][T12976] 
[  195.566960][T12976] 
[  195.566960][T12976] the existing dependency chain (in reverse order) is:
[  195.570265][T12976] 
[  195.570265][T12976] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  195.573710][T12976]        lock_acquire+0x120/0x360
[  195.575798][T12976]        blk_alloc_queue+0x538/0x620
[  195.577986][T12976]        __blk_mq_alloc_disk+0x15c/0x340
[  195.580326][T12976]        nbd_dev_add+0x46c/0xae0
[  195.582375][T12976]        nbd_init+0x168/0x1f0
[  195.584329][T12976]        do_one_initcall+0x236/0x820
[  195.586504][T12976]        do_initcall_level+0x104/0x190
[  195.588650][T12976]        do_initcalls+0x59/0xa0
[  195.590533][T12976]        kernel_init_freeable+0x334/0x4b0
[  195.592485][T12976]        kernel_init+0x1d/0x1d0
[  195.594214][T12976]        ret_from_fork+0x439/0x7d0
[  195.596336][T12976]        ret_from_fork_asm+0x1a/0x30
[  195.598228][T12976] 
[  195.598228][T12976] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  195.600753][T12976]        lock_acquire+0x120/0x360
[  195.602630][T12976]        fs_reclaim_acquire+0x72/0x100
[  195.604634][T12976]        prepare_alloc_pages+0x153/0x610
[  195.606958][T12976]        __alloc_frozen_pages_noprof+0x123/0x370
[  195.609562][T12976]        __alloc_pages_noprof+0xa/0x30
[  195.611558][T12976]        pcpu_populate_chunk+0x182/0xb30
[  195.613583][T12976]        pcpu_alloc_noprof+0xcbf/0x1720
[  195.615860][T12976]        bpf_map_alloc_percpu+0xbc/0x1b0
[  195.618274][T12976]        prealloc_init+0x225/0x630
[  195.620420][T12976]        htab_map_alloc+0x6ce/0xc70
[  195.622230][T12976]        map_create+0xaa3/0x14d0
[  195.623980][T12976]        __sys_bpf+0x60f/0x870
[  195.626073][T12976]        __x64_sys_bpf+0x7c/0x90
[  195.628248][T12976]        do_syscall_64+0xfa/0x3b0
[  195.630419][T12976]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.633220][T12976] 
[  195.633220][T12976] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  195.636544][T12976]        validate_chain+0xb9b/0x2140
[  195.638836][T12976]        __lock_acquire+0xab9/0xd20
[  195.641096][T12976]        lock_acquire+0x120/0x360
[  195.643295][T12976]        __mutex_lock+0x187/0x1350
[  195.645501][T12976]        pcpu_alloc_noprof+0x286/0x1720
[  195.647854][T12976]        sbitmap_init_node+0x1e1/0x630
[  195.650246][T12976]        sbitmap_queue_init_node+0x3e/0x4d0
[  195.652804][T12976]        blk_mq_init_tags+0x110/0x280
[  195.655194][T12976]        blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  195.657781][T12976]        blk_mq_update_nr_hw_queues+0xa26/0x1aa0
[  195.660477][T12976]        nbd_start_device+0x17f/0xb10
[  195.662697][T12976]        nbd_genl_connect+0x135b/0x18f0
[  195.665025][T12976]        genl_family_rcv_msg_doit+0x215/0x300
[  195.667550][T12976]        genl_rcv_msg+0x60e/0x790
[  195.669669][T12976]        netlink_rcv_skb+0x208/0x470
[  195.671919][T12976]        genl_rcv+0x28/0x40
[  195.673903][T12976]        netlink_unicast+0x82f/0x9e0
[  195.676106][T12976]        netlink_sendmsg+0x805/0xb30
[  195.678445][T12976]        __sock_sendmsg+0x21c/0x270
[  195.680731][T12976]        ____sys_sendmsg+0x505/0x830
[  195.683024][T12976]        ___sys_sendmsg+0x21f/0x2a0
[  195.685242][T12976]        __x64_sys_sendmsg+0x19b/0x260
[  195.687561][T12976]        do_syscall_64+0xfa/0x3b0
[  195.689738][T12976]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.692427][T12976] 
[  195.692427][T12976] other info that might help us debug this:
[  195.692427][T12976] 
[  195.696725][T12976] Chain exists of:
[  195.696725][T12976]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50
[  195.696725][T12976] 
[  195.702578][T12976]  Possible unsafe locking scenario:
[  195.702578][T12976] 
[  195.705713][T12976]        CPU0                    CPU1
[  195.707736][T12976]        ----                    ----
[  195.709539][T12976]   lock(&q->q_usage_counter(io)#50);
[  195.711673][T12976]                                lock(fs_reclaim);
[  195.714233][T12976]                                lock(&q->q_usage_counter(io)#50);
[  195.717070][T12976]   lock(pcpu_alloc_mutex);
[  195.718798][T12976] 
[  195.718798][T12976]  *** DEADLOCK ***
[  195.718798][T12976] 
[  195.721919][T12976] 6 locks held by syz.3.1609/12976:
[  195.723703][T12976]  #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  195.727180][T12976]  #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  195.730352][T12976]  #2: ffff888020780988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0
[  195.734267][T12976]  #3: ffff8880207808d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0
[  195.738419][T12976]  #4: ffff8880208e80a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  195.742774][T12976]  #5: ffff8880208e80e0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  195.747209][T12976] 
[  195.747209][T12976] stack backtrace:
[  195.749659][T12976] CPU: 0 UID: 0 PID: 12976 Comm: syz.3.1609 Not tainted syzkaller #0 PREEMPT(full) 
[  195.749676][T12976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.749684][T12976] Call Trace:
[  195.749691][T12976]  <TASK>
[  195.749697][T12976]  dump_stack_lvl+0x189/0x250
[  195.749718][T12976]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.749732][T12976]  ? __pfx__printk+0x10/0x10
[  195.749750][T12976]  ? print_lock_name+0xde/0x100
[  195.749767][T12976]  print_circular_bug+0x2ee/0x310
[  195.749783][T12976]  check_noncircular+0x134/0x160
[  195.749798][T12976]  validate_chain+0xb9b/0x2140
[  195.749817][T12976]  __lock_acquire+0xab9/0xd20
[  195.749837][T12976]  ? pcpu_alloc_noprof+0x286/0x1720
[  195.749855][T12976]  lock_acquire+0x120/0x360
[  195.749871][T12976]  ? pcpu_alloc_noprof+0x286/0x1720
[  195.749892][T12976]  __mutex_lock+0x187/0x1350
[  195.749906][T12976]  ? pcpu_alloc_noprof+0x286/0x1720
[  195.749923][T12976]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  195.749943][T12976]  ? kasan_save_track+0x4f/0x80
[  195.749958][T12976]  ? kasan_save_track+0x3e/0x80
[  195.749971][T12976]  ? __kasan_kmalloc+0x93/0xb0
[  195.749986][T12976]  ? blk_mq_init_tags+0x85/0x280
[  195.750002][T12976]  ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  195.750014][T12976]  ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0
[  195.750027][T12976]  ? pcpu_alloc_noprof+0x286/0x1720
[  195.750043][T12976]  ? nbd_genl_connect+0x135b/0x18f0
[  195.750055][T12976]  ? genl_family_rcv_msg_doit+0x215/0x300
[  195.750070][T12976]  ? genl_rcv_msg+0x60e/0x790
[  195.750085][T12976]  ? __pfx___mutex_lock+0x10/0x10
[  195.750097][T12976]  ? ____sys_sendmsg+0x505/0x830
[  195.750111][T12976]  ? do_syscall_64+0xfa/0x3b0
[  195.750152][T12976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.750171][T12976]  pcpu_alloc_noprof+0x286/0x1720
[  195.750201][T12976]  sbitmap_init_node+0x1e1/0x630
[  195.750218][T12976]  ? __kasan_kmalloc+0x93/0xb0
[  195.750236][T12976]  sbitmap_queue_init_node+0x3e/0x4d0
[  195.750252][T12976]  blk_mq_init_tags+0x110/0x280
[  195.750270][T12976]  blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  195.750286][T12976]  ? blk_mq_update_nr_hw_queues+0x928/0x1aa0
[  195.750300][T12976]  ? kfree+0x18e/0x440
[  195.750316][T12976]  blk_mq_update_nr_hw_queues+0xa26/0x1aa0
[  195.750336][T12976]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  195.750355][T12976]  ? sysfs_add_file_mode_ns+0x259/0x300
[  195.750376][T12976]  nbd_start_device+0x17f/0xb10
[  195.750390][T12976]  ? device_create_file+0xf4/0x1c0
[  195.750403][T12976]  nbd_genl_connect+0x135b/0x18f0
[  195.750416][T12976]  ? __pfx_nbd_genl_connect+0x10/0x10
[  195.750472][T12976]  ? __nla_parse+0x40/0x60
[  195.750487][T12976]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  195.750507][T12976]  genl_family_rcv_msg_doit+0x215/0x300
[  195.750525][T12976]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  195.750546][T12976]  ? stack_trace_save+0x9c/0xe0
[  195.750561][T12976]  genl_rcv_msg+0x60e/0x790
[  195.750576][T12976]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.750590][T12976]  ? __pfx_nbd_genl_connect+0x10/0x10
[  195.750604][T12976]  netlink_rcv_skb+0x208/0x470
[  195.750616][T12976]  ? __lock_acquire+0xab9/0xd20
[  195.750633][T12976]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.750649][T12976]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  195.750666][T12976]  ? down_read+0x1ad/0x2e0
[  195.750681][T12976]  genl_rcv+0x28/0x40
[  195.750696][T12976]  netlink_unicast+0x82f/0x9e0
[  195.750715][T12976]  ? __pfx_netlink_unicast+0x10/0x10
[  195.750733][T12976]  ? netlink_sendmsg+0x642/0xb30
[  195.750744][T12976]  ? skb_put+0x11b/0x210
[  195.750759][T12976]  netlink_sendmsg+0x805/0xb30
[  195.750775][T12976]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.750789][T12976]  ? aa_sock_msg_perm+0xf1/0x1d0
[  195.750801][T12976]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.750814][T12976]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.750827][T12976]  __sock_sendmsg+0x21c/0x270
[  195.750845][T12976]  ____sys_sendmsg+0x505/0x830
[  195.750862][T12976]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.750879][T12976]  ? import_iovec+0x74/0xa0
[  195.750896][T12976]  ___sys_sendmsg+0x21f/0x2a0
[  195.750912][T12976]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.750936][T12976]  ? __fget_files+0x2a/0x420
[  195.750947][T12976]  ? __fget_files+0x3a0/0x420
[  195.750960][T12976]  __x64_sys_sendmsg+0x19b/0x260
[  195.750976][T12976]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.750996][T12976]  ? do_syscall_64+0xbe/0x3b0
[  195.751010][T12976]  do_syscall_64+0xfa/0x3b0
[  195.751023][T12976]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.751035][T12976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.751047][T12976]  ? exc_page_fault+0x9f/0xf0
[  195.751059][T12976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.751071][T12976] RIP: 0033:0x7fb140b8ec29
[  195.751085][T12976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.751096][T12976] RSP: 002b:00007fb141aed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.751110][T12976] RAX: ffffffffffffffda RBX: 00007fb140dd5fa0 RCX: 00007fb140b8ec29
[  195.751119][T12976] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005
[  195.751155][T12976] RBP: 00007fb140c11e41 R08: 0000000000000000 R09: 0000000000000000
[  195.751163][T12976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.751169][T12976] R13: 00007fb140dd6038 R14: 00007fb140dd5fa0 R15: 00007ffe674dbd68
[  195.751190][T12976]  </TASK>
[  196.007821][   T56] block nbd1: Receive control failed (result -107)
[  196.010314][   T56] block nbd1: Receive control failed (result -107)

VM DIAGNOSIS:
14:34:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000059ed RDI=00000000000059ee RBP=00000000000003f8 RSP=ffffc900075be1b0
R8 =ffff888107c88237 R9 =1ffff11020f91046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008cd R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb141aed6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6d05d74c80 CR3=000000001fcaa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7155fa7498 00007f7155fa7470 XMM03=00007f7155fa74a8 00007f7155fa74a0
XMM04=00007f7156b0d100 00007f7155fa7460 XMM05=00007f7155fa7478 00007f7155fa74c0
XMM06=00007f7155fa74b8 00007f7155fa74b0 XMM07=00007f7155fa74a8 00007f7155fa74a0
XMM08=7b20202000000000 0025702020000001 XMM09=0000000000000000 00007f7155e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=135481ad442f4800 RBX=ffffffff819693f8 RCX=135481ad442f4800 RDX=0000000000000001
RSI=ffffffff8be33be0 RDI=ffffffff819693f8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a630 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d7000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c3de14a7e8 CR3=0000000026088000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000014 000000000003bf12
XMM02=02100009b00301b0 10000a9003010000 XMM03=0009e00300100009 d00300100009c003
XMM04=0000000000000000 0000000000000000 XMM05=00005555611c8b9a 00005555611c3d60
XMM06=0000000000000000 0000000000000000 XMM07=0009e00300100009 d00300100009c003
XMM08=02100009b00301b0 10000a9003010000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
